TrendMicro Interscan VirusWall RegGo.dll BOf

Hi, This is a Buffer Overflow vulneravility in Trend Micro InterScan VirusWall for NT 3.5. RegGo.dll is the one. Following code is a peace of exploit program. for j=0 ; j820 ; j++ sploitj='a' ; sploitj++=0xD5 ; sploitj++=0x63 ; sploitj++=0xF6 ; sploitj++=0x77 ; sploitj++=0xCC ; -- any code will b...

Переполнение буфера в Interscan Viruswall (buffer overflow)

Переполнение буфера в RegGo.dll...

Trend Micro Interscan VirusWall 3.01 vulnerability

Trend Micro Interscan VirusWall 3.01 vulnerability Release Date: April 12, 2001 Systems Affected: Linux Systems with Interscan VirusWall 3.01 and most likely older versions Remote Administration Enabled. Other Unix variants are most likely vulnerable also. Description: A combination of bugs found...

Trend Micro Interscan VirusWall (Linux) 3.0.1 - Multiple Program Buffer Overflows

source: https://www.securityfocus.com/bid/2579/info Interscan Viruswall is a Virus scanning software package distributed and maintained by Trend Micro. It is designed to scan for virus occurances in both incoming and outgoing traffic via SMTP, FTP, and HTTP at the gateway of the network. A proble...

Trend Micro Interscan VirusWall (Linux) 3.0.1 - Multiple Program Buffer Overflows

Trend Micro Interscan VirusWall Linux 3.0.1 - Multiple Program Buffer Overflows source: https://www.securityfocus.com/bid/2579/info Interscan Viruswall is a Virus scanning software package distributed and maintained by Trend Micro. It is designed to scan for virus occurances in both incoming and...

CVE-2001-0132

Interscan VirusWall 3.6.x and earlier follows symbolic links when uninstalling the product, which allows local users to overwrite arbitrary files via a symlink attack...

CVE-2001-0133

The web administration interface for Interscan VirusWall 3.6.x and earlier does not use encryption, which could allow remote attackers to obtain the administrator password to sniff the administrator password via the setpasswd.cgi program or other HTTP GET requests that contain base64 encoded...

CVE-2001-0133

CVE-2001-0133 affects Interscan VirusWall 3.6.x and earlier. The web administration interface reportedly does not use encryption, enabling remote attackers to obtain the administrator password by sniffing credentials sent during login or via setpasswd.cgi and other HTTP GET requests that transmit...

CVE-2001-0132

Interscan VirusWall 3.6.x and earlier follows symbolic links when uninstalling the product, which allows local users to overwrite arbitrary files via a symlink attack...

CVE-2001-0132

Interscan VirusWall 3.6.x and earlier is affected by a local‑privilege issue in the uninstall process: it follows symbolic links, enabling local users to overwrite arbitrary files via a symlink attack. The vulnerability stems from the uninstall routine handling of symlinks, and the available refe...

CVE-2001-0133

The web administration interface for Interscan VirusWall 3.6.x and earlier does not use encryption, which could allow remote attackers to obtain the administrator password to sniff the administrator password via the setpasswd.cgi program or other HTTP GET requests that contain base64 encoded...

CVE-2000-1106

Trend Micro InterScan VirusWall creates an Intscan share to the InterScan directory granting Full Control to the Everyone group, enabling attackers to modify VirusWall programs by altering permissions. The shared-access vulnerability is described in CVE-2000-1106 with a CVSS v2 base score of 4.6 ...

Trend Micro's VirusWall: Multiple vunerabilities

InterScan VirusWall - multiple vunerabilities SUMMARY Product: Interscan VirusWall for UNIX Vendor: Trend Micro Testing Platform: RedHat Linux 6.2 vunerable version: 3.0.1 & 3.6.x non-vunerable versions: unknown Vendor: Trend Micro Issues: This advisory covers three separate issues 1 insecure...

Дырки в Interscan VirusWall for UNIX

Передача паролей открытым текстом или со слабой кодировкой. Кроме того - проблема символьных линков...

CVE-2000-1106

Trend Micro InterScan VirusWall creates an "Intscan" share to the "InterScan" directory with permissions that grant Full Control permissions to the Everyone group, which allows attackers to gain privileges by modifying the VirusWall programs...

TrendMicro InterScan VirusWall shared folder problem

I could not find any reference to this particular issue on bugtraq, and as it seems rather serious I decided to submit it. This message concerns what seems to be a security 'feature' in all versions of InterScan SMTP VirusWall for Windows NT at least through version 3.4. The problem is not with t...

Проблемы в TrendMicro InterScan VirusWall (shared folder permissons)

При установке создается разделяемая папка, содержащая исполняемые файлы доступная всем пользователям на запись/изменение...

Responding to BugTraq ID 2014 - "Trend Micro InterScan VirusWall Shared Directory Vulnerability"

Hello, This is to respond to BugTraq ID: 2014, "Trend Micro InterScan VirusWall Shared Directory Vulnerability", posted on SecurityFocus.com on November 28, 2000. Overview: Trend Micro has acknowledged that during installation, by default, InterScan VirusWall for Windows NT creates "Intscan" shar...

CVE-1999-0378

InterScan VirusWall for Solaris fails to scan files for viruses when a single HTTP request includes two GET commands (CVE-1999-0378). This vulnerability is described consistently across Red Hat, NVD, CVE listings, and EUVD records. Affected product: InterScan VirusWall for Solaris. Root cause: th...

CVE-2000-0428

CVE-2000-0428 : Buffer overflow in the SMTP gateway of InterScan Virus Wall versions 3.32 and earlier allows remote command execution via a long filename in a uuencoded attachment. Impact is consistent with a HIGH severity (CVSS 2.0: AV:N/AC:L/Au:N/C:C/I:C/A:C). No remediation details are provide...