Trend Micro ServerProtect for Linux (SPLX) 1.25, 1.3, and 2.5 before 20070216 allows remote attackers to access arbitrary web pages and reconfigure the product via HTTP requests with the splx_2376_info cookie to the web interface port (14942/tcp).Referenceshttp://www.trendmicro.com/download/product.asp?productid=20http://www.vupen.com/english/advisories/2007/0691http://www.securityfocus.com/bid/22662http://securitytracker.com/id?1017685http://secunia.com/advisories/24264http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=477
