CVE-2004-1003

Trend ScanMail allows remote attackers to obtain potentially sensitive information or disable the anti-virus capability via the smency.nsf file...

Trend Micro IMSS Console Management Detection

The remote host appears to run Trend Micro Interscan Messaging Security Suite, connections are allowed to the web console management. Make sure that only authorized hosts can connect to this service, as the information of its existence may help an attacker to make more sophisticated attacks again...

ISS Protection Brief: Trend Micro AntiVirus Library Heap Overflow

-----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Protection Brief February 24, 2005 Trend Micro AntiVirus Library Heap Overflow Summary: ISS has shipped protection for a flaw X-Force has discovered in Trend Micro AntiVirus Library. The Trend Micro AntiVirus Library is widely relied up...

Trend Micro AntiVirus library ARJ archives buffer overflow

Heap overflow during ARJ parsing...

CVE-2005-0533

Heap-based buffer overflow in Trend Micro AntiVirus Library VSAPI before 7.510, as used in multiple Trend Micro products, allows remote attackers to execute arbitrary code via a crafted ARJ file with long header file names that modify pointers within a structure...

CVE-2005-0533

CVE-2005-0533: Heap-based buffer overflow in Trend Micro AntiVirus Library VSAPI prior to 7.510, used across multiple Trend Micro products. An overly long ARJ header file name can overrun a buffer in the ARJ parsing path, enabling remote code execution when a crafted ARJ archive is scanned. Affec...

CVE-2005-0533: Undefined Security Weakness

Heap-based buffer overflow in Trend Micro AntiVirus Library VSAPI before 7.510, as used in multiple Trend Micro products, allows remote attackers to execute arbitrary code via a crafted ARJ file with long header file names that modify pointers within a structure...

Trend Micro VSAPI ARJ Handling Heap Overflow

The remote host is running a version of the Trend Micro engine that has a heap overflow vulnerability in the ARJ handling functions. An attacker may exploit this flaw to bypass virus protection altogether and execute arbitrary code on the remote host. To exploit this flaw, an attacker would need ...

Trend Micro IWSS Console Management Detection

The remote host appears to run the Trend Micro Interscan Web Security Suite. Make sure that only authorized hosts can connect to this service, as the information of its existence may help an attacker to make more sophisticated attacks against the remote network. C Tenable Network Security, Inc...

CVE-2005-0383

Trend Micro Control Manager 3.0 Enterprise Edition allows remote attackers to gain privileges via a replay attack of the encrypted username and password...

CVE-2005-0383

CVE-2005-0383 concerns Trend Micro Control Manager 3.0 Enterprise Edition, where remote attackers can escalate privileges through a replay attack of the encrypted username and password. The available documents confirm the affected product and the underlying issue (replay of credentials) but do no...

CVE-2005-0383: Undefined Security Weakness

Trend Micro Control Manager 3.0 Enterprise Edition allows remote attackers to gain privileges via a replay attack of the encrypted username and password...

Trend Micro Antivirus Detection and Status

Trend Micro Antivirus, a commercial antivirus software package for Windows, is installed on the remote host. However, there is a problem with the installation; either its services are not running or its engine and/or virus definitions are out of date. C Tenable Network Security, Inc...

CVE-2004-2430

Trend OfficeScan Corporate Edition 5.58 and possibly earler does not drop privileges when opening a help window from a virus detection pop-up window, which allows local users to gain SYSTEM privileges...

CVE-2004-1003

Trend ScanMail allows remote attackers to obtain potentially sensitive information or disable the anti-virus capability via the smency.nsf file...

CVE-2004-1003

This CVE affects Trend Micro ScanMail for Domino. The vulnerability concerns the nsf-based component smency.nsf, enabling a remote attacker to read sensitive files and potentially disable antivirus protection. Multiple sources describe the issue as an information-disclosure flaw that could expose...

CVE-2004-1003: Undefined Security Weakness

Trend ScanMail allows remote attackers to obtain potentially sensitive information or disable the anti-virus capability via the smency.nsf file...

Trend Micro Virus Buster cgiWebupdate.exe Arbitrary File Access

Binary data 1627.prm...

Trend Micro Scanmail for Domino nsf File Information Disclosure

This script attempts to read sensitive files used by Trend ScanMail, an antivirus protection program for Domino formerly Lotus Notes. An attacker, exploiting this flaw, may gain access to confidential data or disable the antivirus protection. %NASLMINLEVEL 70300 Written by DokFLeed Looking for...

Trend Officescan local privilege escalation

Product: Trend OfficeScan Product Description: Trend OfficeScan is a Corporate Antivirus product from Trend Microsystems Versions affected: Tested on 5.5 others may be vulnerable Vulnerability type: Local privilege escalation Vendor URL: http://www.trendmicro.com OS tested Windows XP + SP1 others...