CVE-2004-2430

Trend OfficeScan Corporate Edition 5.58 (and possibly earlier) has a local privilege escalation vulnerability: opening a help window from a virus-detection pop-up does not drop privileges, allowing local users to gain SYSTEM privileges. The connected documents confirm affected product and the pri...

CVE-2004-2430

Trend OfficeScan Corporate Edition 5.58 and possibly earler does not drop privileges when opening a help window from a virus detection pop-up window, which allows local users to gain SYSTEM privileges...

CVE-2004-2430: Undefined Security Weakness

Trend OfficeScan Corporate Edition 5.58 and possibly earler does not drop privileges when opening a help window from a virus detection pop-up window, which allows local users to gain SYSTEM privileges...

CVE-2004-2006

Trend Micro OfficeScan 3.0 - 6.0 has default permissions of "Everyone Full Control" on the installation directory and registry keys, which allows local users to disable virus protection...

CVE-2004-2006

Affected software: Trend Micro OfficeScan 3.0–6.0. The vulnerability arises from default permissions of "Everyone Full Control" on the installation directory and registry keys, enabling local users to disable antivirus protection. No explicit exploit details or fixes are provided in the supplied ...

CVE-2004-2006: Undefined Security Weakness

Trend Micro OfficeScan 3.0 - 6.0 has default permissions of "Everyone Full Control" on the installation directory and registry keys, which allows local users to disable virus protection...

CVE-2004-2430

Trend OfficeScan Corporate Edition 5.58 and possibly earler does not drop privileges when opening a help window from a virus detection pop-up window, which allows local users to gain SYSTEM privileges...

Trend Officescan local privilege escalation

Product: Trend OfficeScan Product Description: Trend OfficeScan is a Corporate Antivirus product from Trend Microsystems Versions affected: Tested on 5.5 others may be vulnerable Vulnerability type: Local privilege escalation Vendor URL: http://www.trendmicro.com OS tested Windows XP + SP1 others...

Security issue with Trend OfficeScan Corporate Edition

Product: Trend OfficeScan Product Description: Trend OfficeScan is a Corporate Antivirus product from Trend Microsystems Vendor URL: http://www.antivirus.com Versions affected: 3.0 - 6.0 5.58 is latest version, not fixed until version 6.5 Vendor notified: 12th October 2003 Vendor response: Patch...

CVE-2004-2006

Trend Micro OfficeScan 3.0 - 6.0 has default permissions of "Everyone Full Control" on the installation directory and registry keys, which allows local users to disable virus protection...

CVE-2003-1341

The default installation of Trend Micro OfficeScan 3.0 through 3.54 and 5.x allows remote attackers to bypass authentication from cgiChkMasterPasswd.exe and gain access to the web management console via a direct request to cgiMasterPwd.exe...

Trend Micro OfficeScan 3.x - CGI Directory Insufficient Permissions

Trend Micro OfficeScan 3.x - CGI Directory Insufficient Permissions source: https://www.securityfocus.com/bid/6616/info A vulnerability has been reported for Trend Micro OfficeScan that may allow attackers to access programs residing in the cgi directory of the OfficeScan installation...

Trend Micro OfficeScan 3.x - CGI Directory Insufficient Permissions

source: https://www.securityfocus.com/bid/6616/info A vulnerability has been reported for Trend Micro OfficeScan that may allow attackers to access programs residing in the cgi directory of the OfficeScan installation. http://x.x.x.x/officescan/cgi/cgiMasterPwd.exe...

Trend Micro OfficeScan ofcscan.ini Configuration File Disclosure

The remote Trend Micro OfficeScan Corporate Edition Japanese version: Virus Buster Corporate Edition web-based management console allows unauthenticated access to files under '/officescan/hotdownload'. Reading the configuration file 'ofcscan.ini' under that location will reveal information about...

Trend Micro OfficeScan tmlisten.exe Malformed Data Remote DoS

It was possible to kill the Trend Micro OfficeScan antivirus management service by sending an incomplete HTTP request. C Tenable Network Security, Inc. Script audit and contributions from Carmichael Security Erik Anderson nb: domain no longer exists Added BugtraqID and CVE Status: untested TBD:...

CVE-2001-1151

Trend Micro OfficeScan Corporate Edition aka Virus Buster 3.53 allows remote attackers to access sensitive information from the hotdownload directory without authentication, such as the ofcscan.ini configuration file, which contains a weakly encrypted password...

CVE-2001-1150

CVE-2001-1150 corresponds to a vulnerability in Trend Micro OfficeScan Corporate Edition (Virus Buster) 3.5.2–3.5.4 where the CGI binary cgiWebupdate.exe exposes an information-disclosure/privilege-escalation flaw. The available connected sources describe an information disclosure vulnerability t...

CVE-2001-1151

Affected product : Trend Micro OfficeScan Corporate Edition (Virus Buster Corporate Edition). Vulnerability : Remote disclosure of sensitive configuration data via unauthenticated access to /officescan/hotdownload, specifically reading the configuration file ofcscan.ini which contains a weakly en...

CVE-2001-1150

Vulnerability in cgiWebupdate.exe in Trend Micro OfficeScan Corporate Edition aka Virus Buster 3.5.2 through 3.5.4 allows remote attackers to read arbitrary files...

CVE-2001-1150: Undefined Security Weakness

Vulnerability in cgiWebupdate.exe in Trend Micro OfficeScan Corporate Edition aka Virus Buster 3.5.2 through 3.5.4 allows remote attackers to read arbitrary files...