Trend Micro OfficeScan TMTDI Module Local Privilege Escalation Vulnerability

Bugtraq ID:	45034
Class:	Unknown
CVE:
Remote:	No
Local:	Yes
Published:	Nov 19 2010 12:00AM
Updated:	Nov 19 2010 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Trend Micro OfficeScan 10.5 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98 - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 - Novell Netware 4.11 - Novell Netware 4.11 - Novell Netware 4.1 - Novell Netware 4.1 Trend Micro OfficeScan 10.0 Service Pack 1 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98 - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 - Novell Netware 4.11 - Novell Netware 4.11 - Novell Netware 4.1 - Novell Netware 4.1
Not Vulnerable:

Trend Micro OfficeScan TMTDI Module Local Privilege Escalation Vulnerability

Trend Micro OfficeScan is prone to a local privilege-escalation vulnerability.

Local attackers can exploit this issue to execute arbitrary code with SYSTEM-level privileges and completely compromise the affected computer. Failed exploit attempts will result in a denial-of-service condition.

Trend Micro OfficeScan versions 10.5 and 10.0 Service Pack 1 Patch 2 are affected.

Note: The issue may be related to BID 44567 (Trend Micro Titanium Maximum Security 2011 'tmtdi.sys' Local Privilege Escalation Vulnerability).

Trend Micro OfficeScan TMTDI Module Local Privilege Escalation Vulnerability

Solution:
The vendor has released patches. Please see the references for more information.

Trend Micro OfficeScan TMTDI Module Local Privilege Escalation Vulnerability

References:

• Trend Micro Homepage (Trend Micro)
  
• Critical Patch - Server Build 1161 and NSC Module Build 1024 (Trend Micro)
  
• Critical Patch - Server Build 2820 and NSC Module Build 1024 (Trend Micro)