Buffer overflow in VSAPI library of Trend Micro VirusWall 3.81 for Linux

I - TITLE Security advisory: Buffer overflow in VSAPI library of Trend Micro VirusWall 3.81 for Linux II - SUMMARY Description: Local buffer overflow vulnerability in VSAPI library allows arbitrary code execution and leads to privilege escalation Author: Sebastian Wolfgarten sebastian at wolfgart...

Trend Micro VirusWall VSAPI库本地命令行参数缓冲区溢出漏洞

Trend Micro VirusWall是一款软件的网关防火墙解决方案。 VirusWall 3.81 for Linux产品中所捆绑的libvsapi.so库存在缓冲区溢出，本地攻击者可能利用此漏洞获取root用户权限。 如果能向使用该库的应用程序发送超长的命令行参数的话，就可以触发溢出，导致执行任意代码。这种应用程序的一个示例是vscan。由于vscan默认下设置了set suid root权限，因此攻击者可以利用这个漏洞获得root用户权限。 Trend Micro Interscan Viruswall Linux 3.81...

Trend Micro InterScan VirusWall Version Detection

Binary data 3892.prm...

InterScan VirusWall Remote Configuration Vulnerability

The management interface used with the Interscan VirusWall uses several cgi programs that may allow a malicious user to remotely change the configuration of the server without any authorization using maliciously constructed querystrings. OpenVAS Vulnerability Test $Id: interscanvwcgi.nasl 6063...

InterScan VirusWall Remote Configuration Vulnerability

The management interface used with the Interscan VirusWall uses several cgi programs that may allow a malicious user to remotely change the configuration of the server without any authorization using maliciously constructed querystrings. SPDX-FileCopyrightText: 2001 INTRANODE Some text descriptio...

CVE-2001-1574

CVE-2001-1574 affects Trend Micro InterScan VirusWall 3.5.1 and involves a buffer overflow in two components, HttpSaveCVP.dll and HttpSaveCSP.dll. The flaw can allow remote attackers to execute arbitrary code. The available documents identify the vulnerable files and the impact but do not provide...

CVE-2001-1573

Buffer overflow in smtpscan.dll for Trend Micro InterScan VirusWall 3.51 for Windows NT has allows remote attackers to execute arbitrary code via a certain configuration parameter...

CVE-2001-1574

Buffer overflow in 1 HttpSaveCVP.dll and 2 HttpSaveCSP.dll in Trend Micro InterScan VirusWall 3.5.1 allows remote attackers to execute arbitrary code...

CVE-2001-1573

CVE-2001-1573 describes a buffer overflow in smtpscan.dll used by Trend Micro InterScan VirusWall 3.51 for Windows NT. The root cause is an overflow triggered by a certain configuration parameter, allowing remote attackers to execute arbitrary code. Documents consistently cite the affected compon...

CVE-2002-1839

CVE-2002-1839 affects Trend Micro InterScan VirusWall for Windows NT 3.52. The vulnerability is that the product does not record the sender’s IP address in mail headers when messages are passed from VirusWall to the MTA, enabling remote attackers to obscure the message origin. The connected docum...

CVE-2002-1839

Trend Micro InterScan VirusWall for Windows NT 3.52 does not record the sender's IP address in the headers for a mail message when it is passed from VirusWall to the MTA, which allows remote attackers to hide the origin of the message...

CVE-2004-1859

Summary: CVE-2004-1859 is a directory traversal vulnerability in Trend Micro Interscan VirusWall, specifically affecting the web server component ishttpd. An attacker can remotely read arbitrary files by using a .. (dot dot) in the URL. Affected component: ishttpd within Trend Micro Interscan Vir...

TrendMicro Interscan VirusWall directory traversal

Directory traversal in HTTP proxy service...

Trend Micro Interscan VirusWall localweb - Directory Traversal

Trend Micro Interscan VirusWall localweb - Directory Traversal source: https://www.securityfocus.com/bid/9966/info It has been reported that InterScan VirusWall may to a directory traversal vulnerability that may allow an attacker to request files from the '/ishttp/localweb' directory and any sub...

TrendMacro Interscan Viruswall Directory Traversal

TrendMacro Interscan Viruswall Directory Traversal ================================================= PROGRAM: TrendMacro Interscan Viruswall HOMEPAGE: http://www.trendmicro.com VULNERABLE VERSIONS: - 3.5x Windows - Unix/Solaris version is not tested but possibly vulnerable DESCRIPTION...

trendmicro.txt

TrendMicro Interscan Viruswall Directory Traversal ================================================= PROGRAM: TrendMicro Interscan Viruswall HOMEPAGE: http://www.trendmicro.com VULNERABLE VERSIONS: - 3.5x Windows - Unix/Solaris version is not tested but possibly vulnerable DESCRIPTION...

Trend Micro Interscan VirusWall localweb - Directory Traversal

source: https://www.securityfocus.com/bid/9966/info It has been reported that InterScan VirusWall may to a directory traversal vulnerability that may allow an attacker to request files from the '/ishttp/localweb' directory and any sub directories of 'localweb' with directory traversal strings suc...

CVE-2002-2395

InterScan VirusWall 3.52 for Windows allows remote attackers to bypass virus protection and possibly execute arbitrary code via HTTP 1.1 gzip content encoding...

CVE-2002-2394

InterScan VirusWall 3.6 for Linux and 3.52 for Windows allows remote attackers to bypass virus protection and possibly execute arbitrary code via HTTP 1.1 chunked transfer encoding...

CVE-2002-1839

Trend Micro InterScan VirusWall for Windows NT 3.52 does not record the sender's IP address in the headers for a mail message when it is passed from VirusWall to the MTA, which allows remote attackers to hide the origin of the message...