[NT] Trend Micro OfficeScan CGI Parsing Buffer Overflows

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com
- - promotion

The SecuriTeam alerts list - Free, Accurate, Independent.

Get your security news from a reliable source.
http://www.securiteam.com/mailinglist.html

- - - - - - - - -



Trend Micro OfficeScan CGI Parsing Buffer Overflows
------------------------------------------------------------------------


SUMMARY

"Protect your desktops, laptops, and file servers with
<http://us.trendmicro.com/us/products/enterprise/officescan-client-server-edition/> OfficeScan, comprehensive security against today's complex, blended threats and Web-based attacks." Secunia Research has discovered a vulnerability in Trend Micro OfficeScan Server, which can be exploited by malicious people to compromise a vulnerable system.

DETAILS

Vulnerable Systems:
* Trend Micro OfficeScan version 7.3 patch 4 build 1367

A boundary error when parsing CGI requests can be exploited to cause a
stack-based buffer overflow via an HTTP POST request to an affected CGI
executable with specially crafted form data.

Successful exploitation allows execution of arbitrary code.

Solution:
Apply patches available from Trend Micro.

Time Table:
24/09/2008 - Vendor notified.
24/09/2008 - Vendor response.
30/09/2008 - Vendor confirms vulnerability.
22/10/2008 - Public disclosure.

CVE Information:
<http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3862>
CVE-2008-3862


ADDITIONAL INFORMATION

The information has been provided by Secunia Research.
The original article can be found at:
<http://secunia.com/secunia_research/2008-40/>
http://secunia.com/secunia_research/2008-40/



========================================


This bulletin is sent to members of the SecuriTeam mailing list.
To unsubscribe from the list, send mail with an empty subject line and body to: list-unsubscribe@xxxxxxxxxxxxxx
In order to subscribe to the mailing list, simply forward this email to: list-subscribe@xxxxxxxxxxxxxx


====================
====================

DISCLAIMER:
The information in this bulletin is provided "AS IS" without warranty of any kind.
In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages.

Relevant Pages

  • [UNIX]strongSwan IKEv2 Denial of Service Vulnerability
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... strongSwan IKEv2 Denial of Service Vulnerability ... The vendor has issued a patch, more information on it can be seen at: ... In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages. ...
    (Securiteam)
  • [NT] HP OpenView Products Shared Trace Service Denial of Service
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... HP OpenView Products Shared Trace Service Denial of Service ... 15/10/2007 - Vendor contacted. ... In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages. ...
    (Securiteam)
  • [NT] Buffer Overflow in Knet
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... 17/02/2005 - Vendor Response ... In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages. ...
    (Securiteam)
  • [NT]Trend Micro OfficeScan "cgiRecvFile.exe" Buffer Overflow
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... Apply patches available from the vendor. ... The information in this bulletin is provided "AS IS" without warranty of any kind. ... In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages. ...
    (Securiteam)
  • [UNIX] TRACKtheCLICK Arbitrary HTML/JavaScript Injection
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... TRACKtheCLICK is a perl coded CGI that tracks your email, ezine, banner, ... A vulnerability in the product allows remote attackers to inject HTML ...
    (Securiteam)