Trend Micro InterScan Web Security Suite Multiple Security Bypass Vulnerabilities

Bugtraq ID:	33679
Class:	Access Validation Error
CVE:	CVE-2009-0613
Remote:	Yes
Local:	No
Published:	Feb 09 2009 12:00AM
Updated:	Feb 24 2009 08:27PM
Credit:	Julien Cayssol
Vulnerable:	Trend Micro InterScan Web Security Suite for Windows 3.1 Trend Micro InterScan Web Security Suite for Linux 3.1
Not Vulnerable:

Trend Micro InterScan Web Security Suite Multiple Security Bypass Vulnerabilities

Trend Micro InterScan Web Security Suite is prone to multiple security-bypass vulnerabilities.

Successful exploits may allow attackers to access sensitive areas and to elevate privileges to perform certain restricted actions, such as modifying system configuration.

These issues affect InterScan Web Security Suite 3.1 for Windows. Reportedly, Linux versions of the application are also affected.

Trend Micro InterScan Web Security Suite Multiple Security Bypass Vulnerabilities

Attackers can exploit these issues via a browser.

Trend Micro InterScan Web Security Suite Multiple Security Bypass Vulnerabilities

Solution:
The vendor has released patches and an advisory to address these issues. Please see the references for more information.

Trend Micro InterScan Web Security Suite Multiple Security Bypass Vulnerabilities

References:

• InterScan Web Security Suite Homepage (Trend Micro)
  
• Critical Patch: InterScan(TM) Web Security Suite 3.1 for Windows (Trend Micro)