Trend Virus Control System Admin Script Authentication Bypass Vulnerability
BID:2842
Info
Trend Virus Control System Admin Script Authentication Bypass Vulnerability
| Bugtraq ID: | 2842 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 08 2001 12:00AM |
| Updated: | Jun 08 2001 12:00AM |
| Credit: | Reported to bugtraq by MIWA Nobuo (LAC / [email protected]) on June 8, 2001. |
| Vulnerable: |
Trend Micro Virus Control System 1.8 |
| Not Vulnerable: | |
Discussion
Trend Virus Control System Admin Script Authentication Bypass Vulnerability
TrendMicro's Virus Control System includes a CGI script which supports remote administrative functions within VCS.
The script has been reported to contain an authentication bug which could allow a remote user to improperly gain access to VCS' admin functions.
The advisory did not elaborate on the mechanism of this vulnerability, pending Trend's repair of the bug.
TrendMicro's Virus Control System includes a CGI script which supports remote administrative functions within VCS.
The script has been reported to contain an authentication bug which could allow a remote user to improperly gain access to VCS' admin functions.
The advisory did not elaborate on the mechanism of this vulnerability, pending Trend's repair of the bug.
Exploit / POC
Trend Virus Control System Admin Script Authentication Bypass Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Trend Virus Control System Admin Script Authentication Bypass Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Trend Virus Control System Admin Script Authentication Bypass Vulnerability
References:
References:
- Trend Virus Control System product information site (Trend Micro)