Published at LXer:
Security service provider iDefense has reported that a design flaw in user authentication on the web interface of Trend Micro's ServerProtect for Linux allows attackers to switch off the virus scanner on the server or change its settings. The integrated server listens in on TCP port 14942 by default and is protected by a user-configured password.
Read More...