Trend Micro OfficeScan Weak Default Permissions Vulnerabilities

Bugtraq ID:	10300
Class:	Configuration Error
CVE:
Remote:	No
Local:	Yes
Published:	May 07 2004 12:00AM
Updated:	May 07 2004 12:00AM
Credit:	Disclosure of this issue is credited to "Matt" <[email protected]>.
Vulnerable:	Trend Micro OfficeScan Corporate Edition 5.58 Trend Micro OfficeScan Corporate Edition 5.0 2 Trend Micro OfficeScan Corporate Edition 3.54 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Novell Netware 5.1 - Novell Netware 5.0 - Novell Netware 4.11 - Novell Netware 4.1 - Novell Netware 3.1.2 Trend Micro OfficeScan Corporate Edition 3.13 - Microsoft Windows 3.1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 - Novell Netware 4.11 - Novell Netware 4.1 Trend Micro OfficeScan Corporate Edition 3.11 - Microsoft Windows 3.1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 - Novell Netware 4.11 - Novell Netware 4.1 Trend Micro OfficeScan Corporate Edition 3.5 - Microsoft Windows 3.1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 - Novell Netware 4.11 - Novell Netware 4.1 Trend Micro OfficeScan Corporate Edition 3.0 - Microsoft Windows 3.1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 - Novell Netware 4.11 - Novell Netware 4.1
Not Vulnerable:

Trend Micro OfficeScan Weak Default Permissions Vulnerabilities

It has been reported that OfficeScan is affected by weak default permissions vulnerabilities. This issue is due to insufficient default permissions on the application directory.

These issues would allow a local attacker or malicious software to deactivate the affected antivirus service without requiring any authorization; hosts thought to be secure might have a false sense of security.

Trend Micro OfficeScan Weak Default Permissions Vulnerabilities

No exploit is required to leverage these issues.

Trend Micro OfficeScan Weak Default Permissions Vulnerabilities

Solution:
It has been reported that this issue has been dealt with, at least in part, by a vendor patch. This patch should be available through all Trend Micro distributors and retailers. Please see the referenced web site and contact the vendor for more information.

Trend Micro OfficeScan Weak Default Permissions Vulnerabilities

References:

• Vendor Homepage (Trend Micro)
  
• Security issue with Trend OfficeScan Corporate Edition ("Matt" )