iDefense Security Advisory 12.14.05: Trend Micro PC-Cillin Internet Security Insecure File Permission Vulnerability

Trend Micro PC-Cillin Internet Security Insecure File Permission Vulnerability iDefense Security Advisory 12.14.05 www.idefense.com/application/poi/display?id=351&type=vulnerabilities December 14, 2005 I. BACKGROUND Trend Micro PC-Cillin Internet Security is antivirus protection software for home...

CVE-2005-1928

Trend Micro ServerProtect EarthAgent for Windows Management Console 5.58 and possibly earlier versions, when running with Trend Micro Control Manager 2.5 and 3.0, and Damage Cleanup Server 1.1, allows remote attackers to cause a denial of service CPU consumption via a flood of crafted packets wit...

CVE-2005-1928

Trend Micro ServerProtect EarthAgent for Windows Management Console 5.58 and possibly earlier versions, when running with Trend Micro Control Manager 2.5 and 3.0, and Damage Cleanup Server 1.1, allows remote attackers to cause a denial of service CPU consumption via a flood of crafted packets wit...

CVE-2005-1928

Trend Micro ServerProtect EarthAgent for Windows Management Console 5.58 (and possibly earlier) running with Trend Micro Control Manager 2.5/3.0 and Damage Cleanup Server 1.1 is vulnerable to remote DoS via crafted UDP/TCP traffic on port 5005 using a specific magic value (0x21, 0x43, 0x65, 0x87)...

CVE-2005-1929

Trend Micro ServerProtect Management Console (versions 5.58 and earlier, used in Control Manager 2.5/3.0 and Damage Cleanup Server 1.1) is affected by heap-based buffer overflows in two ISAPI DLLs, isaNVWRequest.dll and relay.dll, triggered by processing large chunked POST requests with wrapped l...

CVE-2005-1929

Multiple heap-based buffer overflows in 1 isaNVWRequest.dll and 2 relay.dll in Trend Micro ServerProtect Management Console 5.58 and earlier, as used in Control Manager 2.5 and 3.0 and Damage Cleanup Server 1.1, allow remote attackers to execute arbitrary code via "wrapped" length values in Chunk...

CVE-2005-1930

Directory traversal vulnerability in the Crystal Report component rptserver.asp in Trend Micro ServerProtect Management Console 5.58, as used in Control Manager 2.5 and 3.0 and Damage Cleanup Server 1.1, and possibly earlier versions, allows remote attackers to read arbitrary files via the IMAGE...

CVE-2005-3360

The installation of Trend Micro PC-Cillin Internet Security 2005 12.00 build 1244, and probably previous versions, uses insecure default ACLs, which allows local users to cause a denial of service disabled service and gain system privileges by modifying or moving critical program files...

CVE-2005-1930

Directory traversal vulnerability in the Crystal Report component rptserver.asp in Trend Micro ServerProtect Management Console 5.58, as used in Control Manager 2.5 and 3.0 and Damage Cleanup Server 1.1, and possibly earlier versions, allows remote attackers to read arbitrary files via the IMAGE...

CVE-2005-1930

CVE-2005-1930 affects Trend Micro ServerProtect Management Console 5.58 (used with Control Manager 2.5/3.0 and Damage Cleanup Server 1.1). The issue is an input validation flaw in rptserver.asp handling the IMAGE parameter, enabling directory traversal and remote viewing of arbitrary files on the...

CVE-2005-3360

The installation of Trend Micro PC-Cillin Internet Security 2005 12.00 build 1244, and probably previous versions, uses insecure default ACLs, which allows local users to cause a denial of service disabled service and gain system privileges by modifying or moving critical program files...

CVE-2005-3360

The CVE-2005-3360 issue affects Trend Micro PC-Cillin Internet Security 2005, version 12.00 build 1244 (and likely earlier builds). The vulnerability arises from insecure default ACLs installed with Trend Micro products, allowing local users to modify or move critical program files. This can enab...

OfficeScan configuration file disclosure

Trend Micro OfficeScan Corporate Edition Japanese version: Virus Buster Corporate Edition web-based management console let anybody access /officescan/hotdownload without authentication. Reading the configuration file /officescan/hotdownload/ofcscan.ini will reveal information on your system. More...

Trend Micro TMCM Console Management Detection (HTTP)

The remote host appears to run Trend Micro Control Manager, connections are allowed to the web console management. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Trend Micro IMSS Console Management Detection (HTTP)

The remote host appears to run Trend Micro Interscan Messaging Security Suite, connections are allowed to the web console management. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holder...

Trend Micro IWSS Console Management Detection (HTTP)

The remote host appears to run the Trend Micro Interscan Web Security Suite. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Trend Micro Emanager .dll Files Vulnerability

The Trend Micro Emanager software resides on this server. Some versions of this software have vulnerable dlls. SPDX-FileCopyrightText: 2003 John Lampe Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

OfficeScan configuration file disclosure

Trend Micro OfficeScan Corporate Edition Japanese version: Virus Buster Corporate Edition web-based management console let anybody access /officescan/hotdownload without authentication. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources,...

Trend Micro OfficeScan Denial of service

It was possible to kill the Trend Micro OfficeScan antivirus management service by sending an incomplete HTTP request. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2005-3379

Multiple interpretation error in Trend Micro 1 PC-Cillin 2005 12.0.1244 with the 7.510.1002 engine and 2 OfficeScan 7.0 with the 7.510.1002 engine allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated...