Trend Micro OfficeScan Client Removal and File Deletion Vulnerabilities

Bugtraq ID:	20330
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 03 2006 12:00AM
Updated:	Oct 04 2006 04:55PM
Credit:	The vendor reported these issues.
Vulnerable:	Trend Micro OfficeScan Corporate Edition 7.0 Trend Micro OfficeScan Corporate Edition 6.5 Trend Micro OfficeScan Corporate Edition 7.3
Not Vulnerable:

Trend Micro OfficeScan Client Removal and File Deletion Vulnerabilities

Trend Micro OfficeScan is prone to a denial-of-service issue via software removal and to arbitrary file-deletion vulnerabilities. A successful exploit will allow a remote attacker to forcibly remove the OfficeScan client or to delete arbitrary files from an OfficeScan server.

Trend Micro OfficeScan Corporate Edition 7.3 and prior versions are reported vulnerable.

Trend Micro OfficeScan Client Removal and File Deletion Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]

Trend Micro OfficeScan Client Removal and File Deletion Vulnerabilities

Solution:
Reports indicate that the vendor has addressed this issue in a series of OfficeScan Corporate Edition patches. Please contact the vendor for more information.

Trend Micro OfficeScan Client Removal and File Deletion Vulnerabilities

References:

• OffficeScan Update Center (Trend Micro)
  
• Trend Micro OfficeScan Product Homepage (Trend Micro)