Trend Micro OfficeScan Multiple CGI Module Vulnerabilities

The remote host is either running Worry-Free Business Security or Trend Micro OfficeScan/Trend Micro OfficeScan client. The installed version is affected by multiple vulnerabilities : - If Trend Micro OfficeScan client 'Tmlisten.exe' is configured to receive updates from other clients, it may be...

Trend Micro OfficeScan Client Traversal Arbitrary File Access

The version of Trend Micro OfficeScan client running on the remote host is affected by a directory traversal issue that can be leveraged by an unauthenticated, remote attacker to read arbitrary files on the remote host. Note that successful exploitation requires that 'Tmlisten.exe' be configured ...

Trend Micro OfficeScan directory traversal

Directory traversal in update agent server part...

Secunia Research: Trend Micro OfficeScan Directory Traversal Vulnerability

====================================================================== Secunia Research 02/10/2008 - Trend Micro OfficeScan Directory Traversal Vulnerability - ====================================================================== Table of Contents Affected...

CVE-2008-4402

Multiple buffer overflows in CGI modules in the server in Trend Micro OfficeScan 8.0 SP1 before build 2439 and 8.0 SP1 Patch 1 before build 3087 allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2008-4403

The CGI modules in the server in Trend Micro OfficeScan 8.0 SP1 before build 2439 and 8.0 SP1 Patch 1 before build 3087 allow remote attackers to cause a denial of service NULL pointer dereference and child process crash via crafted HTTP headers, related to the "error handling mechanism."...

Buffer overflow

Multiple buffer overflows in CGI modules in the server in Trend Micro OfficeScan 8.0 SP1 before build 2439 and 8.0 SP1 Patch 1 before build 3087 allow remote attackers to execute arbitrary code via unspecified vectors...

Null pointer dereference

The CGI modules in the server in Trend Micro OfficeScan 8.0 SP1 before build 2439 and 8.0 SP1 Patch 1 before build 3087 allow remote attackers to cause a denial of service NULL pointer dereference and child process crash via crafted HTTP headers, related to the "error handling mechanism."...

Directory traversal

Directory traversal vulnerability in the UpdateAgent function in TmListen.exe in the OfficeScanNT Listener service in the client in Trend Micro OfficeScan 7.3 Patch 4 build 1367 and other builds before 1372, OfficeScan 8.0 SP1 before build 1222, OfficeScan 8.0 SP1 Patch 1 before build 3087, and...

CVE-2008-2439

Directory traversal vulnerability in the UpdateAgent function in TmListen.exe in the OfficeScanNT Listener service in the client in Trend Micro OfficeScan 7.3 Patch 4 build 1367 and other builds before 1372, OfficeScan 8.0 SP1 before build 1222, OfficeScan 8.0 SP1 Patch 1 before build 3087, and...

CVE-2008-4402

Multiple buffer overflows in CGI modules in the server in Trend Micro OfficeScan 8.0 SP1 before build 2439 and 8.0 SP1 Patch 1 before build 3087 allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2008-2439

CVE-2008-2439 describes a directory traversal vulnerability in the UpdateAgent function of TmListen.exe in Trend Micro OfficeScan/OfficeScanNT Listener service. A remote attacker can read arbitrary files via directory traversal sequences in an HTTP request. Affected products include OfficeScan 7....

CVE-2008-4402

CVE-2008-4402 concerns multiple buffer overflows in the CGI modules of Trend Micro OfficeScan server. Affected products are OfficeScan 8.0 SP1 before build 2439 and 8.0 SP1 Patch 1 before build 3087. Successful exploitation could allow remote attackers to run arbitrary code with web server privil...

CVE-2008-4403

CVE-2008-4403 affects Trend Micro OfficeScan 8.0 SP1 before build 2439 and 8.0 SP1 Patch 1 before build 3087. The CGI server modules can be exploited remotely to trigger a denial of service via crafted HTTP headers, caused by a NULL pointer dereference in the error handling mechanism. The availab...

CVE-2008-4402: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in CGI modules in the server in Trend Micro OfficeScan 8.0 SP1 before build 2439 and 8.0 SP1 Patch 1 before build 3087 allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2008-2439: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the UpdateAgent function in TmListen.exe in the OfficeScanNT Listener service in the client in Trend Micro OfficeScan 7.3 Patch 4 build 1367 and other builds before 1372, OfficeScan 8.0 SP1 before build 1222, OfficeScan 8.0 SP1 Patch 1 before build 3087, and...

CVE-2008-4403: Undefined Security Weakness

The CGI modules in the server in Trend Micro OfficeScan 8.0 SP1 before build 2439 and 8.0 SP1 Patch 1 before build 3087 allow remote attackers to cause a denial of service NULL pointer dereference and child process crash via crafted HTTP headers, related to the "error handling mechanism."...

Update Protection against Trend Micro OfficeScan Server cgiRecvFile Buffer Overflow

A buffer overflow vulnerability exists in Trend Micro OfficeScan, which if successfully exploited, allows execution of arbitrary code. Trend Micro OfficeScan is a centralized virus and security scan management system. The application fails to properly handle specially crafted ,user-supplied...

Trend Micro OfficeScan Server cgiRecvFile.exe Buffer Overflow Vulnerability.

This Remote host is installed with Trend Micro OfficeScan, which is prone to Buffer Overflow Vulnerability. OpenVAS Vulnerability Test $Id: secpodtrendmicroofficescanbofvulnsept08900220.nasl 8615 2018-02-01 08:19:49Z cfischer $ Description: Trend Micro OfficeScan Server cgiRecvFile.exe Buffer...

Trend Micro OfficeScan Server cgiRecvFile.exe Buffer Overflow Vulnerability.

Trend Micro OfficeScan is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...