Trend Micro Data Loss Prevention Web Chat Content Filtering Security Bypass Vulnerability

Bugtraq ID:	40514
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 02 2010 12:00AM
Updated:	Jun 02 2010 12:00AM
Credit:	Alejandro Hernández H. a.k.a nitr�?us
Vulnerable:	Trend Micro Data Loss Prevention 5.2
Not Vulnerable:

Trend Micro Data Loss Prevention Web Chat Content Filtering Security Bypass Vulnerability

Trend Micro Data Loss Prevention is prone to a security-bypass vulnerability because it fails to properly enforce filtering rules.

A successful attack will allow an attacker to bypass intended restrictions. This may result in the disclosure of sensitive information.

This issue affects Data Loss Prevention 5.2; other versions may also be vulnerable.

Trend Micro Data Loss Prevention Web Chat Content Filtering Security Bypass Vulnerability

Attackers can exploit this issue using readily available tools.

Trend Micro Data Loss Prevention Web Chat Content Filtering Security Bypass Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Trend Micro Data Loss Prevention Web Chat Content Filtering Security Bypass Vulnerability

References:

• Data Loss Prevention Homepage (Trend Micro)
  
• Trend MicroTM Data Loss Prevention 5.2 (formerly LeakProof) Data Leakage through (Alejandro Hernández H. a.k.a nitr�?us)
  
• Trend Micro Data Loss Prevention 5.2 Data Leakage (=?windows-1252?Q?nitr=D8us?= )