iDefense Security Advisory 07.16.07: Trend Micro OfficeScan Management Console Authorization Bypass Vulnerability

Trend Micro OfficeScan Management Console Authorization Bypass Vulnerability iDefense Security Advisory 07.16.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jul 16, 2007 I. BACKGROUND Trend Micro OfficeScan is a centrally managed AntiVirus solution that allows administrators to manage...

CVE-2007-3455

The CVE-2007-3455 issue affects Trend Micro OfficeScan Corporate Edition 8.0. The vulnerability is in cgiChkMasterPwd.exe, where an empty hash and an empty encrypted password string can lead to the assignment of a valid session ID, enabling remote access to the Management Console. This constitute...