Trend Micro Interscan Viruswall Configurations Modification Vulnerability

Bugtraq ID:	2859
Class:	Origin Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 12 2001 12:00AM
Updated:	Jun 12 2001 12:00AM
Credit:	Discovered and posted to Bugtraq by SNS Advisory <[email protected]> on June 12, 2001.
Vulnerable:	Trend Micro InterScan VirusWall for Windows NT 3.51 - Microsoft Windows NT 3.5.1 SP5 - Microsoft Windows NT 3.5.1 SP4 - Microsoft Windows NT 3.5.1 SP3 - Microsoft Windows NT 3.5.1 SP2 - Microsoft Windows NT 3.5.1 SP1 - Microsoft Windows NT 3.5.1 - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 - Microsoft Windows NT 3.5
Not Vulnerable:

Trend Micro Interscan Viruswall Configurations Modification Vulnerability

A remote user could utilize the administrator functions of Interscan Viruswall without providing authentication credentials. This may allow the user to make configuration changes when submitting specially crafted URLs to the host.

Trend Micro Interscan Viruswall Configurations Modification Vulnerability

http://VirusWall/interscan/cgi-bin/interscan.dll

Trend Micro Interscan Viruswall Configurations Modification Vulnerability

References:

• InterScan VirusWall Product Home Page (Trend Micro)