Trend Micro ServerProtect Relay Heap Overflow Vulnerability
BID:15866
Info
Trend Micro ServerProtect Relay Heap Overflow Vulnerability
| Bugtraq ID: | 15866 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2005-1929 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 14 2005 12:00AM |
| Updated: | Dec 14 2005 12:00AM |
| Credit: | Discovery is credited to an anonymous source. |
| Vulnerable: |
Trend Micro ServerProtect for Windows 5.58 |
| Not Vulnerable: | |
Discussion
Trend Micro ServerProtect Relay Heap Overflow Vulnerability
A remotely exploitable heap-based buffer overflow vulnerability is present in the Trend Micro ServerProtect 'relay.dll' component in the Management Console.
An attacker could exploit this issue to execute arbitrary code in the context of the underlying Web server.
This issue is reported to affect ServerProtect 5.58 for Windows running with
Trend Micro Control Manager 2.5/3.0 and Trend Micro Damage Cleanup Server 1.1. Other versions and platforms may be affected as well. It is also possible that other Trend Micro products such as InterScan eManager, InterScan Web Protect, OfficeScan, and Control Manager could be impacted as well.
It is noted that the vulnerability may actually be present in the MFC (Microsoft Foundation Class) ISAPI libraries. This issue may be related to BID 9963 "Microsoft Visual C++ MFC ISAPI Extension Denial Of Service Vulnerability".
A remotely exploitable heap-based buffer overflow vulnerability is present in the Trend Micro ServerProtect 'relay.dll' component in the Management Console.
An attacker could exploit this issue to execute arbitrary code in the context of the underlying Web server.
This issue is reported to affect ServerProtect 5.58 for Windows running with
Trend Micro Control Manager 2.5/3.0 and Trend Micro Damage Cleanup Server 1.1. Other versions and platforms may be affected as well. It is also possible that other Trend Micro products such as InterScan eManager, InterScan Web Protect, OfficeScan, and Control Manager could be impacted as well.
It is noted that the vulnerability may actually be present in the MFC (Microsoft Foundation Class) ISAPI libraries. This issue may be related to BID 9963 "Microsoft Visual C++ MFC ISAPI Extension Denial Of Service Vulnerability".
Exploit / POC
Trend Micro ServerProtect Relay Heap Overflow Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Trend Micro ServerProtect Relay Heap Overflow Vulnerability
Solution:
Trend Micro has acknowledged this vulnerability but has not released patches since the issue appears to exist in the Microsoft MFC ISAPI libraries. This issue may be addressed in the libraries associated with Visual C++ 6.0 with Service Pack 6, though this has not been confirmed by Symantec.
---
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Trend Micro has acknowledged this vulnerability but has not released patches since the issue appears to exist in the Microsoft MFC ISAPI libraries. This issue may be addressed in the libraries associated with Visual C++ 6.0 with Service Pack 6, though this has not been confirmed by Symantec.
---
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Trend Micro ServerProtect Relay Heap Overflow Vulnerability
References:
References: