CVE-2006-3261

Cross-site scripting XSS vulnerability in Trend Micro Control Manager TMCM 3.5 allows remote attackers to inject arbitrary web script or HTML via the username field on the login page, which is not properly sanitized before being displayed in the error log...

CVE-2006-3261: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Trend Micro Control Manager TMCM 3.5 allows remote attackers to inject arbitrary web script or HTML via the username field on the login page, which is not properly sanitized before being displayed in the error log...

Trend Micro Control Manager crossite scripting

It's possible to inject script into username...

Trend Micro Control Manager (TMCM) Persistent XSS Vulnerability

Trend Micro Control Manager TMCM Persistent XSS Vulnerability June 23, 2006 Product Overview: Trend Micro Control Manager is a centralized, web-based outbreak management console designed to simplify enterprise-wide coordination of outbreak security actions and management of Trend Micro products a...

Trend Micro OfficeScan Client Version

Binary data officescanversion.nbin...

Design/Logic Flaw

ISNTSmtp directory in Trend Micro InterScan Messaging Security Suite IMSS 5.5 build 1183 and possibly other versions before 5.7.0.1121, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying ISNTSysMonitor.exe...

Code injection

Trend Micro PC-cillin Internet Security 2006 14.00.1485 and 14.10.0.1023, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying executable programs such as 1 tmntsrv.exe and 2 tmproxy.exe...

Code injection

Trend Micro OfficeScan 5.5, and probably other versions before 6.5, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying tmlisten.exe...

CVE-2006-1380

ISNTSmtp directory in Trend Micro InterScan Messaging Security Suite IMSS 5.5 build 1183 and possibly other versions before 5.7.0.1121, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying ISNTSysMonitor.exe...

CVE-2006-1379

Trend Micro PC-cillin Internet Security 2006 14.00.1485 and 14.10.0.1023, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying executable programs such as 1 tmntsrv.exe and 2 tmproxy.exe...

CVE-2006-1381

Trend Micro OfficeScan 5.5, and probably other versions before 6.5, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying tmlisten.exe...

CVE-2006-1381

Trend Micro OfficeScan 5.5, and probably other versions before 6.5, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying tmlisten.exe...

CVE-2006-1381

Trend Micro OfficeScan 5.5 (and likely versions before 6.5) is affected by a privilege-escalation issue caused by insecure DACLs on critical files, enabling local users to gain SYSTEM privileges by modifying tmlisten.exe. The issue is documented across multiple sources (NVD, PT-2006-2390) with ex...

CVE-2006-1379

Trend Micro PC-cillin Internet Security 2006 versions 14.00.1485 through 14.10.0.1023 are affected by insecure DACLs on critical files, allowing local users to gain SYSTEM privileges by modifying executables (tmntsrv.exe and tmproxy.exe). Root cause: improper access control on key binaries. Impac...

CVE-2006-1379

Trend Micro PC-cillin Internet Security 2006 14.00.1485 and 14.10.0.1023, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying executable programs such as 1 tmntsrv.exe and 2 tmproxy.exe...

CVE-2006-1380

ISNTSmtp directory in Trend Micro InterScan Messaging Security Suite IMSS 5.5 build 1183 and possibly other versions before 5.7.0.1121, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying ISNTSysMonitor.exe...

CVE-2006-1380

The CVE-2006-1380 issue affects Trend Micro InterScan Messaging Security Suite (IMSS) prior to 5.7.0.1121. The ISNTSmtp directory uses insecure DACLs on critical files, enabling local users to gain SYSTEM privileges by modifying ISNTSysMonitor.exe. Affected versions include IMSS 5.5 build 1183 an...

PT-2006-2388 · Trend Micro · Trend Micro Pc-Cillin Internet Security

Name of the Vulnerable Software and Affected Versions: Trend Micro PC-cillin Internet Security 2006 versions 14.00.1485 through 14.10.0.1023 Description: The issue allows local users to gain SYSTEM privileges by modifying executable programs. This is due to the software using insecure DACLs for...

CVE-2006-1380: Undefined Security Weakness

ISNTSmtp directory in Trend Micro InterScan Messaging Security Suite IMSS 5.5 build 1183 and possibly other versions before 5.7.0.1121, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying ISNTSysMonitor.exe...

CVE-2006-1381: Undefined Security Weakness

Trend Micro OfficeScan 5.5, and probably other versions before 6.5, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying tmlisten.exe...