Trend Micro OfficeScan and Worry-Free Business Security Multiple Vulnerabilities

Bugtraq ID:	31531
Class:	Unknown
CVE:	CVE-2008-2439 CVE-2008-4403
Remote:	Yes
Local:	No
Published:	Sep 30 2008 12:00AM
Updated:	Jul 05 2016 10:01PM
Credit:	Dyon Balding, Secunia Research and Trend Micro
Vulnerable:	Trend Micro Worry-Free Business Security 5.0 Trend Micro OfficeScan 8.0 SP 1 Patch 1 - Microsoft Windows 3.1 - Microsoft Windows 3.1 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98 - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 - Novell Netware 4.11 - Novell Netware 4.11 - Novell Netware 4.1 - Novell Netware 4.1 Trend Micro OfficeScan 8.0 Service Pack 1 - Microsoft Windows 3.1 - Microsoft Windows 3.1 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98 - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 - Novell Netware 4.11 - Novell Netware 4.11 - Novell Netware 4.1 - Novell Netware 4.1 Trend Micro OfficeScan 7.3 - Microsoft Windows 3.1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 - Novell Netware 4.11 - Novell Netware 4.1
Not Vulnerable:

Trend Micro OfficeScan and Worry-Free Business Security Multiple Vulnerabilities

Trend Micro OfficeScan and Worry-Free Business Security are prone to multiple security vulnerabilities.

Successful exploits may allow an attacker to crash the application, execute arbitrary code, or obtain sensitive information within the context of the affected application.

These issues affect the following:

OfficeScan 8.0 Service Pack 1
OfficeScan 8.0 Service Pack 1 Patch 1
OfficeScan 7.3 patch 4 with critical patches 1355, 1362, and 1367 applied.
Worry-Free Business Security 5.0

Trend Micro OfficeScan and Worry-Free Business Security Multiple Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Trend Micro OfficeScan and Worry-Free Business Security Multiple Vulnerabilities

Solution:
The vendor released fixes to address these issues. Please see the references for more information.


Trend Micro OfficeScan 7.3

• Trend Micro OSCE_7.3_Win_EN_CriticalPatch_B1372.exe
  http://www.trendmicro.com/ftp/products/patches/OSCE_7.3_Win_EN_Critica lPatch_B1372.exe

Trend Micro Worry-Free Business Security 5.0

• Trend Micro WFBS_50_WIN_EN_CriticalPatch_B1414.exe
  http://www.trendmicro.com/ftp/products/patches/WFBS_50_WIN_EN_Critical Patch_B1414.exe

Trend Micro OfficeScan and Worry-Free Business Security Multiple Vulnerabilities

References:

• Trend Micro OfficeScan Multiple Vulnerabilities (Secunia Research)
  
• Trend Micro OfficeScan Directory Traversal Vulnerability (Trend Micro)
  
• Trend Micro OfficeScan Homepage (Trend Micro)
  
• Trend Micro(TM) OfficeScan(TM) 7.3 Critical Patch - Build 1372 Cl (Trend Micro)
  
• Trend Micro(TM) OfficeScan(TM) 8.0 Service Pack 1 Critical Patch - Serv (Trend Micro)
  
• Trend Micro(TM) OfficeScan(TM) 8.0 Service Pack 1 Patch 1 Critical Patch (Trend Micro)
  
• Worry-Free Business Security 5.0 - Client/Server Security Agent Crit (Trend Micro)
  
• Secunia Research: Trend Micro OfficeScan Directory Traversal Vulnerability (Secunia Research )