Trend InterScan VirusWall Remote Buffer Overflow Vulnerability
BID:2870
Info
Trend InterScan VirusWall Remote Buffer Overflow Vulnerability
| Bugtraq ID: | 2870 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 13 2001 12:00AM |
| Updated: | Jun 13 2001 12:00AM |
| Credit: | Reported to bugtraq by Nobuo Miwa (LAC / [email protected]) on June 13, 2001. |
| Vulnerable: |
Trend Micro InterScan VirusWall for Windows NT 3.51 |
| Not Vulnerable: | |
Discussion
Trend InterScan VirusWall Remote Buffer Overflow Vulnerability
Components of Trend Micro's InterScan VirusWall have been found to contain remotely exploitable buffer overflows.
Two components of VirusWall support the application's remote administrative functions. These accept various parameters submitted in URLs.
By appending long strings to the submitted URLs, an attacker can create a buffer overflow condition.
As a result of this overflow, excessive data copied onto the stack can overwrite critical parts of the stack frame such as the calling functions' return address.
Since this data is supplied by the user it can be made to alter the program's flow of execution.
Properly executed, such an attack can allow an attacker to gain SYSTEM privilege and execute arbitrary hostile code.
Components of Trend Micro's InterScan VirusWall have been found to contain remotely exploitable buffer overflows.
Two components of VirusWall support the application's remote administrative functions. These accept various parameters submitted in URLs.
By appending long strings to the submitted URLs, an attacker can create a buffer overflow condition.
As a result of this overflow, excessive data copied onto the stack can overwrite critical parts of the stack frame such as the calling functions' return address.
Since this data is supplied by the user it can be made to alter the program's flow of execution.
Properly executed, such an attack can allow an attacker to gain SYSTEM privilege and execute arbitrary hostile code.
Solution / Fix
Trend InterScan VirusWall Remote Buffer Overflow Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.