Trend Micro Interscan Viruswall RegGo.dll Buffer Overflow Vulnerability

Bugtraq ID:	2746
Class:	Boundary Condition Error
CVE:	CVE-2001-0678
Remote:	No
Local:	No
Published:	May 18 2001 12:00AM
Updated:	Jul 11 2009 06:06AM
Credit:	Discovered and posted to Bugtraq by Nobuo Miwa <[email protected]> on May 19, 2001.
Vulnerable:	Trend Micro InterScan VirusWall for Windows NT 3.5 - Microsoft Windows NT 3.5.1 SP5 - Microsoft Windows NT 3.5.1 SP4 - Microsoft Windows NT 3.5.1 SP3 - Microsoft Windows NT 3.5.1 SP2 - Microsoft Windows NT 3.5.1 SP1 - Microsoft Windows NT 3.5
Not Vulnerable:

Trend Micro Interscan Viruswall RegGo.dll Buffer Overflow Vulnerability

An exploitable buffer overflow exists in RegGo.dll of Interscan Viruswall, which could allow the execution of arbitrary code.

This may lead to compromise of hosts running vulnerable versions of Interscan Viruswall.

Trend Micro Interscan Viruswall RegGo.dll Buffer Overflow Vulnerability

It is believed a working exploit exists, however it has not been published.

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Trend Micro Interscan Viruswall RegGo.dll Buffer Overflow Vulnerability

Solution:
Trend Micro is aware of this vulnerability and it will reportedly be fixed in build 1349 of Interscan Viruswall version 3.51.

Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Trend Micro Interscan Viruswall RegGo.dll Buffer Overflow Vulnerability

References:

• InterScan VirusWall Product Home Page (Trend Micro)