CVE-2006-1381

Trend Micro OfficeScan 5.5, and probably other versions before 6.5, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying tmlisten.exe...

CVE-2004-2006

Trend Micro OfficeScan 3.0 - 6.0 has default permissions of "Everyone Full Control" on the installation directory and registry keys, which allows local users to disable virus protection...

CVE-2003-1341

The default installation of Trend Micro OfficeScan 3.0 through 3.54 and 5.x allows remote attackers to bypass authentication from cgiChkMasterPasswd.exe and gain access to the web management console via a direct request to cgiMasterPwd.exe...

Trend Micro OfficeScan 3.x - CGI Directory Insufficient Permissions

Trend Micro OfficeScan 3.x - CGI Directory Insufficient Permissions source: https://www.securityfocus.com/bid/6616/info A vulnerability has been reported for Trend Micro OfficeScan that may allow attackers to access programs residing in the cgi directory of the OfficeScan installation...

Trend Micro OfficeScan 3.x - CGI Directory Insufficient Permissions

source: https://www.securityfocus.com/bid/6616/info A vulnerability has been reported for Trend Micro OfficeScan that may allow attackers to access programs residing in the cgi directory of the OfficeScan installation. http://x.x.x.x/officescan/cgi/cgiMasterPwd.exe...

Trend Micro OfficeScan tmlisten.exe Malformed Data Remote DoS

It was possible to kill the Trend Micro OfficeScan antivirus management service by sending an incomplete HTTP request. C Tenable Network Security, Inc. Script audit and contributions from Carmichael Security Erik Anderson nb: domain no longer exists Added BugtraqID and CVE Status: untested TBD:...

CVE-2001-1151

Trend Micro OfficeScan Corporate Edition aka Virus Buster 3.53 allows remote attackers to access sensitive information from the hotdownload directory without authentication, such as the ofcscan.ini configuration file, which contains a weakly encrypted password...

CVE-2001-1151

Affected product : Trend Micro OfficeScan Corporate Edition (Virus Buster Corporate Edition). Vulnerability : Remote disclosure of sensitive configuration data via unauthenticated access to /officescan/hotdownload, specifically reading the configuration file ofcscan.ini which contains a weakly en...

CVE-2001-1150

Vulnerability in cgiWebupdate.exe in Trend Micro OfficeScan Corporate Edition aka Virus Buster 3.5.2 through 3.5.4 allows remote attackers to read arbitrary files...

[SNS Advisory No.40] TrendMicro OfficeScan Corp Edition ver.3.54 Remote read file of IUSER authority Vulnerability

---------------------------------------------------------------------- SNS Advisory No.40 TrendMicro OfficeScan Corp Edition ver.3.54 Remote read file of IUSER authority Vulnerability Problem first discovered: 21 Aug 2001 Published: Fri, 24 Aug 2001...

CVE-2000-0204

The Trend Micro OfficeScan client allows remote attackers to cause a denial of service by making 5 connections to port 12345, which raises CPU utilization to 100%...

CVE-2000-0203

CVE-2000-0203 affects the Trend Micro OfficeScan client, specifically the tmlisten.exe component. A remote attacker can cause a denial of service by sending malformed data to TCP port 12345, with no authentication required. The issue is classified as a network-based DoS with low attack complexity...

CVE-2000-0205

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2000-0203

The Trend Micro OfficeScan client tmlisten.exe allows remote attackers to cause a denial of service via malformed data to port 12345...

CVE-2000-0204

The Trend Micro OfficeScan client allows remote attackers to cause a denial of service by making 5 connections to port 12345, which raises CPU utilization to 100%...

Trend Micro OfficeScan Corporate Edition 3.03.53.113.13 - Denial of Service

Trend Micro OfficeScan Corporate Edition 3.03.53.113.13 - Denial of Service source: https://www.securityfocus.com/bid/1013/info Trend Micro OfficeScan is an antivirus software program which is deployable across an entire network. During the installation of the management software, the administrat...

Trend Micro OfficeScan Corporate Edition 3.0/3.5/3.11/3.13 - Denial of Service

source: https://www.securityfocus.com/bid/1013/info Trend Micro OfficeScan is an antivirus software program which is deployable across an entire network. During the installation of the management software, the administrator is asked to choose between managing from a webserver or from a fileserver...