Trend Micro OfficeScan Management Console Authentication Bypass Vulnerability

Bugtraq ID:	24935
Class:	Access Validation Error
CVE:	CVE-2007-3455
Remote:	Yes
Local:	No
Published:	Jul 17 2007 12:00AM
Updated:	Jul 17 2007 07:26PM
Credit:	David Maciejak is credited with the discovery of this issue.
Vulnerable:	Trend Micro OfficeScan Corporate Edition 7.0 Trend Micro OfficeScan Corporate Edition 6.5 Trend Micro OfficeScan Corporate Edition 8.0 Trend Micro OfficeScan Corporate Edition 7.3 Trend Micro OfficeScan Corporate Edition 6.0 Trend Micro Client Server Messaging Security for SMB 3.6 Trend Micro Client Server Messaging Security for SMB 3.5 Trend Micro Client Server Messaging Security for SMB 3.0
Not Vulnerable:

Trend Micro OfficeScan Management Console Authentication Bypass Vulnerability

Trend Micro OfficeScan is prone to an authentication-bypass vulnerability because it fails to adequately handle user-supplied input.

Attackers can exploit this issue to gain unauthorized access to the application's web-based management console. Successful attacks will compromise the application.

OfficeScan 7.3 is vulnerable; other versions may also be affected.

Trend Micro OfficeScan Management Console Authentication Bypass Vulnerability

An attacker can exploit this issue via a browser.

Trend Micro OfficeScan Management Console Authentication Bypass Vulnerability

Solution:
The vendor has released patches to address this issue. Please see the references for more information.


Trend Micro OfficeScan Corporate Edition 6.0

• Trend Micro csm_20_osce_60_win_en_securitypatch_b1398.exe
  http://www.trendmicro.com/ftp/products/patches/csm_20_osce_60_win_en_s ecuritypatch_b1398.exe

Trend Micro OfficeScan Corporate Edition 7.3

• Trend Micro osce_73_win_en_securitypatch_b1293.exe
  http://www.trendmicro.com/ftp/products/patches/osce_73_win_en_security patch_b1293.exe

Trend Micro Client Server Messaging Security for SMB 3.5

• Trend Micro csm_35_osce_75_win_en_securitypatch_b1152.exe
  http://www.trendmicro.com/ftp/products/patches/csm_35_osce_75_win_en_s ecuritypatch_b1152.exe


• Trend Micro csm_36_osce_76_win_en_securitypatch_b1149.exe
  http://www.trendmicro.com/ftp/products/patches/csm_36_osce_76_win_en_s ecuritypatch_b1149.exe

Trend Micro Client Server Messaging Security for SMB 3.0

• Trend Micro csm_30_osce_72_win_en_securitypatch_b1209.exe
  http://www.trendmicro.com/ftp/products/patches/csm_30_osce_72_win_en_s ecuritypatch_b1209.exe

Trend Micro OfficeScan Corporate Edition 8.0

• Trend Micro osce_80_win_en_securitypatch-b1042.exe
  http://www.trendmicro.com/ftp/products/patches/osce_80_win_en_security patch-b1042.exe

Trend Micro OfficeScan Corporate Edition 6.5

• Trend Micro osce_65_win_en_securitypatch_b1458.exe
  http://www.trendmicro.com/ftp/products/patches/osce_65_win_en_security patch_b1458.exe

Trend Micro OfficeScan Corporate Edition 7.0

• Trend Micro osce_70_win_en_securitypatch_b1364.exe
  http://www.trendmicro.com/ftp/products/patches/osce_70_win_en_security patch_b1364.exe

Trend Micro OfficeScan Management Console Authentication Bypass Vulnerability

References:

• Trend Micro OfficeScan Homepage (Trend Micro)
  
• Trend Micro OfficeScan Management Console Authorization Bypass Vulnerability (iDefense Labs)
  
• iDefense Security Advisory 07.16.07: Trend Micro OfficeScan Management (iDefense Labs)
  
• Trend Micro OfficeScan Corporate Edition 8.0 Security Patch - Build 1042 CGI mod (Trend Micro)