Trend Micro InterScan eManager Buffer Overflow Vulnerability
BID:3327
Info
Trend Micro InterScan eManager Buffer Overflow Vulnerability
| Bugtraq ID: | 3327 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2001-0958 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 12 2001 12:00AM |
| Updated: | Jul 11 2009 07:56AM |
| Credit: | This vulnerability was discovered by ARAI Yuu (LAC) [email protected] |
| Vulnerable: |
Trend Micro InterScan eManager 3.51 j Trend Micro InterScan eManager 3.51 |
| Not Vulnerable: | |
Discussion
Trend Micro InterScan eManager Buffer Overflow Vulnerability
Trend Micro InterScan eManager is a plug-in for InterScan which manages spam, message content, and mail delivery. It can be managed through a web-based console interface.
Several CGI components of eManager contain a buffer overflow vulnerability which could allow an attacker to execute arbitrary code within the Local System context.
It is important to note the web management console does not have an authentication method.
Trend Micro InterScan eManager is a plug-in for InterScan which manages spam, message content, and mail delivery. It can be managed through a web-based console interface.
Several CGI components of eManager contain a buffer overflow vulnerability which could allow an attacker to execute arbitrary code within the Local System context.
It is important to note the web management console does not have an authentication method.
Exploit / POC
Trend Micro InterScan eManager Buffer Overflow Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Trend Micro InterScan eManager Buffer Overflow Vulnerability
Solution:
Trend Micro has released a patch to address this vulnerability for the Japanese version of eManager:
Trend Micro InterScan eManager 3.51 j
Solution:
Trend Micro has released a patch to address this vulnerability for the Japanese version of eManager:
Trend Micro InterScan eManager 3.51 j
-
Trend Micro solution3142.zip
http://www.trendmicro.co.jp/support/download/isem_nt/sol3142/solution3 142.zip
References
Trend Micro InterScan eManager Buffer Overflow Vulnerability
References:
References:
- SNS Advisory No. 42 (SNS)
- Trend Micro Homepage (Trend Micro)