TUCoPS :: Security App Flaws

TUCoPS :: Security App Flaws :: bx1125.htm
Trend Micro ServerProtect StRpcSrv.dll Insecure Method Exposure Vulnerability
ZDI-07-077: Trend Micro ServerProtect StRpcSrv.dll Insecure Method Exposure Vulnerability ZDI-07-077: Trend Micro ServerProtect StRpcSrv.dll Insecure Method Exposure Vulnerability
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