Trend Micro OfficeScan Command Injection Vulnerability

Trend Micro OfficeScan is a suite of distributed anti-virus software from Trend Micro. A command injection vulnerability exists in Trend Micro OfficeScan version 11 and XG 12. A remote attacker could exploit this vulnerability to execute arbitrary code...

CVE-2017-11394

Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG 12 allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the T parameter within Proxy.php. Formerly ZDI-CAN-4544...

CVE-2017-11394

Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG 12 allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the T parameter within Proxy.php. Formerly ZDI-CAN-4544...

Command injection

Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG 12 allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the T parameter within Proxy.php. Formerly ZDI-CAN-4544...

CVE-2017-11393

Trend Micro OfficeScan is affected by a Proxy.php parameter parsing flaw that enables remote code execution via the tr parameter in the Web Console’s Proxy.php. Affected products include OfficeScan 11 and XG (12). The vulnerability allows code execution under the current service context; exploita...

CVE-2017-11393

Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG 12 allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the tr parameter within Proxy.php. Formerly ZDI-CAN-4543...

CVE-2017-11394

CVE-2017-11394 describes a proxy.php parameter handling flaw in Trend Micro OfficeScan 11 and XG (12) that allows remote command execution via improper validation of HTTP parameters (Proxy.php). The vulnerability enables an attacker to execute arbitrary code on vulnerable installations. Public re...

Code injection

Trend Micro OfficeScan 11.0 before SP1 CP 6325 and XG before CP 1352 allows remote authenticated users to gain privileges by leveraging a leak of an encrypted password during a web-console operation...

Trend Micro OfficeScan Directory Traversal Vulnerability

Trend Micro OfficeScan is a suite of distributed anti-virus software from Trend Micro. Trend Micro OfficeScan fails to adequately filter user-submitted input, allowing yu8ancheng attackers to exploit a vulnerability by submitting directory traversal requests to access arbitrary files containing...

Trend Micro OfficeScan Corporate Edition 3.0/3.5/3.11/3.13 DoS Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/1013/info Trend Micro OfficeScan is an antivirus software program which is deployable across an entire network. During the installation of the management software, the administrator is asked to choose between managing fro...

Trend Micro OfficeScan 8.0 Client - Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/34642/info The Trend Micro OfficeScan Client is prone to a denial-of-service vulnerability because it fails to handle nested directories with excessively long names. Successfully exploits will crash the affected...

Trend Micro OfficeScan - Remote Stack Buffer Overflow (Metasploit)

$Id: trendmicroofficescan.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Trend Micro OfficeScan Console Authentication Buffer Overflow (CVE-2007-3454)

Trend Micro OfficeScan is a centralized virus and security scan management system. It is meant to consolidate the coordination of security scan actions and the management of Trend Micro virus scanner products installed on the nodes of an enterprise network. The product is a central command centre...

Trend Micro OfficeScan URL Filtering Engine Buffer Overflow Vulnerability

This host has Trend Micro OfficeScan running which is prone to Buffer Overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodtrendmicroofficescanurlfiltbofvuln.nasl 5368 2017-02-20 14:34:16Z cfi $ Trend Micro OfficeScan URL Filtering Engine Buffer Overflow Vulnerability Authors: Veerendra ...

Trend Micro OfficeScan Client Denial Of Service Vulnerability

This host is installed with Trend Micro OfficeScan Client and is prone to Denial of Service Vulnerability. OpenVAS Vulnerability Test $Id: secpodtrendmicroofficescandosvuln.nasl 5369 2017-02-20 14:48:07Z cfi $ Trend Micro OfficeScan Client Denial Of Service Vulnerability Authors: Antu Sanadi...

Information disclosure

NTRtScan.exe in Trend Micro OfficeScan Client 8.0 SP1 and 8.0 SP1 Patch 1 allows local users to cause a denial of service application crash via directories with long pathnames. NOTE: some of these details are obtained from third party information...

Trend Micro OfficeScan Client - DOS

Application: Trend Micro OfficeScan Client for Windows 8.0 sp1 OS: Windows XP ------------------------------------------------------ 1 - Description 2 - Vulnerability 3 - POC/EXPLOIT ------------------------------------------------------ Description OfficeScan is a good antivirus that used in man...

Trend Micro OfficeScan 8.0 Client - Denial of Service

Trend Micro OfficeScan 8.0 Client - Denial of Service source: https://www.securityfocus.com/bid/34642/info The Trend Micro OfficeScan Client is prone to a denial-of-service vulnerability because it fails to handle nested directories with excessively long names. Successfully exploits will crash th...

Trend Micro OfficeScan Client Firewall Multiple Vulnerabilities

The remote host is either running Trend Micro OfficeScan or Trend Micro OfficeScan Client. The installed version is affected by multiple vulnerabilities : - A vulnerability in 'ApiThread' function could allow a malicious local user to execute arbitrary code with SYSTEM privileges by sending...

Heap overflow

Multiple heap-based buffer overflows in the ApiThread function in the firewall service aka TmPfw.exe in Trend Micro Network Security Component NSC modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007 and 2008 17.0.1224, allow remote attackers to execute arbitrary...