SNS Advisory No.30 Trend Micro InterScan VirusWall for Windows NT 3.51 reconfiguration without authentication
Problem first discovered: 24 May 2001 Published: 12 Jun 2001 Last Updated:12 Jun 2001
It is possible for a remote user to improperly gain access to admin functions of InterScan VirusWall for Windows NT.
To change configurations via web browser, access to following URL:
Then, no authentication is required and any remote user can change configuration setting.
InterScan VirusWall for Windows NT 3.51J Japanese InterScan VirusWall for Windows NT 3.51 English
Windows NT 4.0 Server SP6a [English Version] Windows NT 4.0 Server SP6a [Japanese Version]
Trend Micro support team responded nothing.
Until the patch will be released, set up access control to refuse access to servers in which InterScan VirusWall is installed by non-administrative user.
Nobuo Miwa (LAC / firstname.lastname@example.org)
All information in this advisories are subject to change without any advanced notices neither mutual consensus, and each of them is released as it is. LAC Co.,Ltd. is not responsible for any risks of occurrences caused by applying those information.
Archive of this advisory: http://www.lac.co.jp/security/english/snsadv_e/30_e.html
SNS Advisory: http://www.lac.co.jp/security/english/snsadv_e/
Secure Net Service(SNS) Security Advisory <email@example.com> Computer Security Laboratory, LAC http://www.lac.co.jp/security/