Trend Micro Virusbuster 2001 Remote Command Execution Vulnerability

Bugtraq ID:	2396
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	Yes
Published:	Feb 07 2001 12:00AM
Updated:	Feb 07 2001 12:00AM
Credit:	Reported to bugtraq by Ichinose Sayo <[email protected]>
Vulnerable:	Trend Micro Virusbuster 2001 8.0.1
Not Vulnerable:	Trend Micro Virusbuster 2001 8.0.2

Trend Micro Virusbuster 2001 Remote Command Execution Vulnerability

Solution:
Due to prompt response by Trend Micro, the version 8.02, which was fixed this problem, was published on February 7th.
You can update to Program Version 8.02 by using the feature of automatically updating software called Intelligent Update.

If you have not updated your software since February 7th, you must upgrade to the version 8.02 with Intelligent Update immediately.

Required conditions for updating are:
1) using product version as registered user.
2) updating the software with Intelligent Update.
(License key is necessary to do this.)

Also, the Service Pack to fix this issue is available from:

http://www.trendmicro.co.jp/homeuser/download/vb2001sp2.htm
(Japanese only; the program will be updated to 8.02.)

Trend Micro Virusbuster 2001 Remote Command Execution Vulnerability

References:

• Trend Micro Virusbuster 2001 Remote Command Execution Vulnerability (Trend Micro)