CVE-2017-11391: Improper Neutralization of Special Elements used in a Command

Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the "t" parameter within modTMCSS Proxy. Formerly ZDI-CAN-4744...

CVE-2017-11392: Improper Neutralization of Special Elements used in a Command

Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the "T" parameter within modTMCSS Proxy. Formerly ZDI-CAN-4745...

PT-2017-11978

Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Messaging Virtual Appliance versions 9.0 through 9.1 Description The issue allows remote attackers to execute arbitrary code on vulnerable installations by exploiting a proxy command injection vulnerability. This can be...

PT-2017-11977

Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Messaging Virtual Appliance versions 9.0 through 9.1 Description The issue allows remote attackers to execute arbitrary code on vulnerable installations by exploiting a proxy command injection vulnerability. This can be...