133 matches found
Trend Micro Interscan VirusWall (Linux) 3.0.1 - Multiple Program Buffer Overflows
Trend Micro Interscan VirusWall Linux 3.0.1 - Multiple Program Buffer Overflows source: https://www.securityfocus.com/bid/2579/info Interscan Viruswall is a Virus scanning software package distributed and maintained by Trend Micro. It is designed to scan for virus occurances in both incoming and...
Trend Micro Interscan VirusWall (Linux) 3.0.1 - Multiple Program Buffer Overflows
source: https://www.securityfocus.com/bid/2579/info Interscan Viruswall is a Virus scanning software package distributed and maintained by Trend Micro. It is designed to scan for virus occurances in both incoming and outgoing traffic via SMTP, FTP, and HTTP at the gateway of the network. A proble...
CVE-2001-0132
Interscan VirusWall 3.6.x and earlier follows symbolic links when uninstalling the product, which allows local users to overwrite arbitrary files via a symlink attack...
CVE-2001-0133
The web administration interface for Interscan VirusWall 3.6.x and earlier does not use encryption, which could allow remote attackers to obtain the administrator password to sniff the administrator password via the setpasswd.cgi program or other HTTP GET requests that contain base64 encoded...
CVE-2001-0133
The web administration interface for Interscan VirusWall 3.6.x and earlier does not use encryption, which could allow remote attackers to obtain the administrator password to sniff the administrator password via the setpasswd.cgi program or other HTTP GET requests that contain base64 encoded...
CVE-2001-0132
Interscan VirusWall 3.6.x and earlier follows symbolic links when uninstalling the product, which allows local users to overwrite arbitrary files via a symlink attack...
CVE-2001-0132
Interscan VirusWall 3.6.x and earlier is affected by a local‑privilege issue in the uninstall process: it follows symbolic links, enabling local users to overwrite arbitrary files via a symlink attack. The vulnerability stems from the uninstall routine handling of symlinks, and the available refe...
CVE-2001-0133
CVE-2001-0133 affects Interscan VirusWall 3.6.x and earlier. The web administration interface reportedly does not use encryption, enabling remote attackers to obtain the administrator password by sniffing credentials sent during login or via setpasswd.cgi and other HTTP GET requests that transmit...
CVE-2000-1106
Trend Micro InterScan VirusWall creates an Intscan share to the InterScan directory granting Full Control to the Everyone group, enabling attackers to modify VirusWall programs by altering permissions. The shared-access vulnerability is described in CVE-2000-1106 with a CVSS v2 base score of 4.6 ...
Trend Micro's VirusWall: Multiple vunerabilities
InterScan VirusWall - multiple vunerabilities SUMMARY Product: Interscan VirusWall for UNIX Vendor: Trend Micro Testing Platform: RedHat Linux 6.2 vunerable version: 3.0.1 & 3.6.x non-vunerable versions: unknown Vendor: Trend Micro Issues: This advisory covers three separate issues 1 insecure...
Дырки в Interscan VirusWall for UNIX
Передача паролей открытым текстом или со слабой кодировкой. Кроме того - проблема символьных линков...
CVE-2000-1106
Trend Micro InterScan VirusWall creates an "Intscan" share to the "InterScan" directory with permissions that grant Full Control permissions to the Everyone group, which allows attackers to gain privileges by modifying the VirusWall programs...
Responding to BugTraq ID 2014 - "Trend Micro InterScan VirusWall Shared Directory Vulnerability"
Hello, This is to respond to BugTraq ID: 2014, "Trend Micro InterScan VirusWall Shared Directory Vulnerability", posted on SecurityFocus.com on November 28, 2000. Overview: Trend Micro has acknowledged that during installation, by default, InterScan VirusWall for Windows NT creates "Intscan" shar...
Проблемы в TrendMicro InterScan VirusWall (shared folder permissons)
При установке создается разделяемая папка, содержащая исполняемые файлы доступная всем пользователям на запись/изменение...
TrendMicro InterScan VirusWall shared folder problem
I could not find any reference to this particular issue on bugtraq, and as it seems rather serious I decided to submit it. This message concerns what seems to be a security 'feature' in all versions of InterScan SMTP VirusWall for Windows NT at least through version 3.4. The problem is not with t...
CVE-1999-0378
InterScan VirusWall for Solaris fails to scan files for viruses when a single HTTP request includes two GET commands (CVE-1999-0378). This vulnerability is described consistently across Red Hat, NVD, CVE listings, and EUVD records. Affected product: InterScan VirusWall for Solaris. Root cause: th...
CVE-1999-0378
InterScan VirusWall for Solaris doesn't scan files for viruses when a single HTTP request includes two GET commands...
nai.00-05-04.trendmicro
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Network Associates, Inc. COVERT Labs Security Advisory May 4, 2000 Trend Micro InterScan VirusWall Remote Overflow o Synopsis An implementation flaw in the InterScan VirusWall SMTP gateway allows a remote attacker to execute code with the privileges o...
Trend Micro InterScan VirusWall Remote Overflow
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Network Associates, Inc. COVERT Labs Security Advisory May 4, 2000 Trend Micro InterScan VirusWall Remote Overflow o Synopsis An implementation flaw in the InterScan VirusWall SMTP gateway allows a remote attacker to execute code with the privileges o...