432 matches found
Interscan Web Security Virtual Appliance 5.0 - Arbitrary File Download
Interscan Web Security Virtual Appliance 5.0 - Arbitrary File Download Exploit Title: Arbitrary File Download in InterScan Web Security Virtual Appliance 5.0 Date: 22-06-2010 Author: Ivan Huertas Software Link: http://downloadcenter.trendmicro.com/index.php?clk=tbl&clkval=249®s=NABU?loc=1...
Interscan Web Security 5.0 - Arbitrary File Upload Privilege Escalation
Interscan Web Security 5.0 - Arbitrary File Upload Privilege Escalation Advisory Name: Local Privilege Escalation in InterScan Web Security Virtual Apliance 5.0 Internal Cybsec Advisory Id: 2010-0604 Vulnerability Class: Local Privilege Escalation Release Date: 22-06-2010 Affected Applications:...
Interscan Web Security 5.0 - Arbitrary File Upload / Privilege Escalation
Advisory Name: Local Privilege Escalation in InterScan Web Security Virtual Apliance 5.0 Internal Cybsec Advisory Id: 2010-0604 Vulnerability Class: Local Privilege Escalation Release Date: 22-06-2010 Affected Applications: InterScan Web Security Virtual Aplliance 5.0. Other versions may be...
Interscan Web Security Virtual Appliance 5.0 - Arbitrary File Download
Exploit Title: Arbitrary File Download in InterScan Web Security Virtual Appliance 5.0 Date: 22-06-2010 Author: Ivan Huertas Software Link: http://downloadcenter.trendmicro.com/index.php?clk=tbl&clkval=249®s=NABU?loc=1 Version: 5.0 Tested on: Red Hat Nash 5.1 Vulnerability Description: The...
TrendMicro InterScan Viruswall Directory Traversal (CVE-2004-1859)
There is a directory traversal vulnerability within the web server ishttpd, which is a component of Trend Micro's Interscan Viruswall product. Viruswall is an enterprise level proxy that monitors incoming connections over HTTP, SMTP and FTP for file transfers. If Viruswall detects a file being...
CVE-2009-0612
Trend Micro InterScan Web Security Virtual Appliance IWSVA 3.x and InterScan Web Security Suite IWSS 3.x, when basic authorization is enabled on the standalone proxy, forwards the Proxy-Authorization header from Windows Media Player, which allows remote web servers to obtain credentials by offeri...
Authorization
Trend Micro InterScan Web Security Virtual Appliance IWSVA 3.x and InterScan Web Security Suite IWSS 3.x, when basic authorization is enabled on the standalone proxy, forwards the Proxy-Authorization header from Windows Media Player, which allows remote web servers to obtain credentials by offeri...
CVE-2009-0613
Trend Micro InterScan Web Security Suite IWSS 3.1 before build 1237 allows remote authenticated Auditor and Report Only users to bypass intended permission settings, and modify the system configuration, via requests to unspecified JSP pages...
趋势科技InterScan Web Security Suite绕过安全限制漏洞
BUGTRAQ ID: 33679 趋势科技的InterScan Web Security Suite（IWSS）在网关处针对基于Web方式的攻击为企业网络提供动态的、集成式的安全保护。 IWSS的多个JSP页面存在访问控制错误，非管理权限帐户（Auditor和Report Only）可以非授权修改某些配置值，如创建管理员帐号。 Trend Micro InterScan Web Security Suite 3.1 厂商补丁： Trend Micro ----------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
趋势科技Interscan Web Security HTTP代理认证信息泄露漏洞
BUGTRAQ ID: 33687 趋势科技的InterScan Web Security Suite（IWSS）在网关处针对基于Web方式的攻击为企业网络提供动态的、集成式的安全保护。 在IWSS启用了基本授权且客户端使用Windows Media Player作为其视频播放器的情况下，WMP会发送以下格式的授权头： Proxy-Authorization: basic =xxxxxxxxxx...
CVE-2002-2395
InterScan VirusWall 3.52 for Windows allows remote attackers to bypass virus protection and possibly execute arbitrary code via HTTP 1.1 gzip content encoding...
CVE-2002-2395
CVE-2002-2395 affects InterScan VirusWall 3.52 for Windows. The vulnerability allows remote attackers to bypass virus protection and potentially execute arbitrary code through HTTP/1.1 gzip content encoding. Multiple sources (Red Hat, CVE lists, NVD) reiterate the impact, with no details on explo...
CVE-2002-2394
InterScan VirusWall 3.6 for Linux and 3.52 for Windows is affected by a vulnerability that allows remote attackers to bypass antivirus protection and potentially execute arbitrary code through HTTP/1.1 chunked transfer encoding. Affected components: VirusWall on Linux (3.6) and Windows (3.52). Ro...
CVE-2002-2394
InterScan VirusWall 3.6 for Linux and 3.52 for Windows allows remote attackers to bypass virus protection and possibly execute arbitrary code via HTTP 1.1 chunked transfer encoding...
Trend Micro InterScan VirusWall Version Detection
Binary data 3892.prm...
CVE-2006-1380
ISNTSmtp directory in Trend Micro InterScan Messaging Security Suite IMSS 5.5 build 1183 and possibly other versions before 5.7.0.1121, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying ISNTSysMonitor.exe...
PT-2006-2389 · Trend Micro · Trend Micro Interscan Messaging Security Suite
Name of the Vulnerable Software and Affected Versions: Trend Micro InterScan Messaging Security Suite versions prior to 5.7.0.1121 Description: The issue concerns the ISNTSmtp directory in Trend Micro InterScan Messaging Security Suite, which uses insecure DACLs for critical files. This allows...
InterScan VirusWall Remote Configuration Vulnerability
The management interface used with the Interscan VirusWall uses several cgi programs that may allow a malicious user to remotely change the configuration of the server without any authorization using maliciously constructed querystrings. OpenVAS Vulnerability Test $Id: interscanvwcgi.nasl 6063...
InterScan VirusWall Remote Configuration Vulnerability
The management interface used with the Interscan VirusWall uses several cgi programs that may allow a malicious user to remotely change the configuration of the server without any authorization using maliciously constructed querystrings. SPDX-FileCopyrightText: 2001 INTRANODE Some text descriptio...