Trend Micro InterScan WebManager RegGo.dll Buffer Overflow Vulnerability

Bugtraq ID:	2907
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 21 2001 12:00AM
Updated:	Jun 21 2001 12:00AM
Credit:	Discovered and reported to bugtraq by Secure Net Service(SNS) <[email protected]> on June 21, 2001.
Vulnerable:	Trend Micro InterScan WebManager 1.2 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT Server 4.0
Not Vulnerable:	Trend Micro InterScan WebManager 2.1

Trend Micro InterScan WebManager RegGo.dll Buffer Overflow Vulnerability

A remotely exploitable buffer overflow exists in RegGo.dll, a component of Interscan WebManager, which could allow the execution of arbitrary code.

This may lead to compromise of hosts running vulnerable versions of WebManager.

Trend Micro InterScan WebManager RegGo.dll Buffer Overflow Vulnerability

Currently the SecurityFocus staff are not aware of any publicly available exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Trend Micro InterScan WebManager RegGo.dll Buffer Overflow Vulnerability

References:

• WebManager product information (Trend Micro)