547 matches found
Trend Micro's VirusWall: Multiple vunerabilities
InterScan VirusWall - multiple vunerabilities SUMMARY Product: Interscan VirusWall for UNIX Vendor: Trend Micro Testing Platform: RedHat Linux 6.2 vunerable version: 3.0.1 & 3.6.x non-vunerable versions: unknown Vendor: Trend Micro Issues: This advisory covers three separate issues 1 insecure...
CVE-2000-1106
Trend Micro InterScan VirusWall creates an "Intscan" share to the "InterScan" directory with permissions that grant Full Control permissions to the Everyone group, which allows attackers to gain privileges by modifying the VirusWall programs...
Responding to BugTraq ID 2014 - "Trend Micro InterScan VirusWall Shared Directory Vulnerability"
Hello, This is to respond to BugTraq ID: 2014, "Trend Micro InterScan VirusWall Shared Directory Vulnerability", posted on SecurityFocus.com on November 28, 2000. Overview: Trend Micro has acknowledged that during installation, by default, InterScan VirusWall for Windows NT creates "Intscan" shar...
Проблемы в TrendMicro InterScan VirusWall (shared folder permissons)
При установке создается разделяемая папка, содержащая исполняемые файлы доступная всем пользователям на запись/изменение...
TrendMicro InterScan VirusWall shared folder problem
I could not find any reference to this particular issue on bugtraq, and as it seems rather serious I decided to submit it. This message concerns what seems to be a security 'feature' in all versions of InterScan SMTP VirusWall for Windows NT at least through version 3.4. The problem is not with t...
CVE-1999-0378
InterScan VirusWall for Solaris fails to scan files for viruses when a single HTTP request includes two GET commands (CVE-1999-0378). This vulnerability is described consistently across Red Hat, NVD, CVE listings, and EUVD records. Affected product: InterScan VirusWall for Solaris. Root cause: th...
CVE-2000-0428
CVE-2000-0428 : Buffer overflow in the SMTP gateway of InterScan Virus Wall versions 3.32 and earlier allows remote command execution via a long filename in a uuencoded attachment. Impact is consistent with a HIGH severity (CVSS 2.0: AV:N/AC:L/Au:N/C:C/I:C/A:C). No remediation details are provide...
CVE-1999-0378
InterScan VirusWall for Solaris doesn't scan files for viruses when a single HTTP request includes two GET commands...
CVE-2000-0428
Buffer overflow in the SMTP gateway for InterScan Virus Wall 3.32 and earlier allows a remote attacker to execute arbitrary commands via a long filename for a uuencoded attachment...
CVE-2000-0428: Undefined Security Weakness
Buffer overflow in the SMTP gateway for InterScan Virus Wall 3.32 and earlier allows a remote attacker to execute arbitrary commands via a long filename for a uuencoded attachment...
CVE-1999-0378: Undefined Security Weakness
InterScan VirusWall for Solaris doesn't scan files for viruses when a single HTTP request includes two GET commands...
nai.00-05-04.trendmicro
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Network Associates, Inc. COVERT Labs Security Advisory May 4, 2000 Trend Micro InterScan VirusWall Remote Overflow o Synopsis An implementation flaw in the InterScan VirusWall SMTP gateway allows a remote attacker to execute code with the privileges o...
Trend Micro InterScan VirusWall Remote Overflow
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Network Associates, Inc. COVERT Labs Security Advisory May 4, 2000 Trend Micro InterScan VirusWall Remote Overflow o Synopsis An implementation flaw in the InterScan VirusWall SMTP gateway allows a remote attacker to execute code with the privileges o...
CVE-2000-0428
Buffer overflow in the SMTP gateway for InterScan Virus Wall 3.32 and earlier allows a remote attacker to execute arbitrary commands via a long filename for a uuencoded attachment...
CVE-2000-0033
CVE-2000-0033 affects InterScan VirusWall SMTP scanner; vulnerability arises from improper handling of messages with malformed attachments. CVSS v2 base score 5.0 (MEDIUM) with no confidentiality/availability impact and partial integrity impact. No remediation details are provided in the documents.
CVE-2000-0033
InterScan VirusWall SMTP scanner does not properly scan messages with malformed attachments...
CVE-2000-0033: Undefined Security Weakness
InterScan VirusWall SMTP scanner does not properly scan messages with malformed attachments...
New DOS on Interscan NT/3.32
One month ago, during a audit, we found a new remote DOS on TrendMicro Interscan for NT last version V3.32, build 1011 and 1022. Last October, USSR Labs found a buffer overflow in HELO command, and wrote a very nice exploit with shell code, giving SYSTEM shell access to remote attacker. Trendmicr...
Trend Micro InterScan 3.32 SMTP HELO Command Remote Overflow DoS
It was possible to perform a denial of service against the remote Interscan SMTP server by sending it a special long HELO command. This problem allows an attacker to prevent your Interscan SMTP server from handling requests. This script was written by Alain Thivillon Script audit and contribution...