Trend Micro InterScan VirusWall Space Gap Scan Bypass Vulnerability

Bugtraq ID:	5259
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2002-0637
Remote:	Yes
Local:	No
Published:	Jul 18 2002 12:00AM
Updated:	Jul 11 2009 02:56PM
Credit:	Discovery credited to "Noam Rathaus" <[email protected]>.
Vulnerable:	Trend Micro InterScan VirusWall for Windows NT 3.52 - Microsoft Windows NT Enterprise Server 4.0 SP6a - Microsoft Windows NT Enterprise Server 4.0 SP6 - Microsoft Windows NT Enterprise Server 4.0 SP5 - Microsoft Windows NT Enterprise Server 4.0 SP4 - Microsoft Windows NT Enterprise Server 4.0 SP3 - Microsoft Windows NT Enterprise Server 4.0 SP2 - Microsoft Windows NT Enterprise Server 4.0 SP1 - Microsoft Windows NT Enterprise Server 4.0 - Microsoft Windows NT Server 4.0 SP6a - Microsoft Windows NT Server 4.0 SP6 - Microsoft Windows NT Server 4.0 SP5 - Microsoft Windows NT Server 4.0 SP4 - Microsoft Windows NT Server 4.0 SP3 - Microsoft Windows NT Server 4.0 SP2 - Microsoft Windows NT Server 4.0 SP1 - Microsoft Windows NT Server 4.0 - Microsoft Windows NT Terminal Server 4.0 SP6 - Microsoft Windows NT Terminal Server 4.0 SP5 - Microsoft Windows NT Terminal Server 4.0 SP4 - Microsoft Windows NT Terminal Server 4.0 SP3 - Microsoft Windows NT Terminal Server 4.0 SP2 - Microsoft Windows NT Terminal Server 4.0 SP1 - Microsoft Windows NT Terminal Server 4.0 alpha - Microsoft Windows NT Terminal Server 4.0 - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0
Not Vulnerable:	Trend Micro InterScan VirusWall for Windows NT 5.1 Trend Micro InterScan VirusWall for Windows NT 3.52 build 1466

Trend Micro InterScan VirusWall Space Gap Scan Bypass Vulnerability

The following exploit has been provided by "Noam Rathaus" <[email protected]>:

• /data/vulnerabilities/exploits/viruswall-space-gap.pl

Trend Micro InterScan VirusWall Space Gap Scan Bypass Vulnerability

Solution:
The vendor has released a patch to address this vulnerability:


Trend Micro InterScan VirusWall for Windows NT 3.52

• Trend Micro Hotfix_build1466.zip
  ftp://ftp-download.trendmicro.com.ph/Gateway/isnt/Hotfix_build1466.zip

Trend Micro InterScan VirusWall Space Gap Scan Bypass Vulnerability

References:

• InterScan VirusWall Product Home Page (Trend Micro)
  
• TrendMicro's VirusWall Space Gap (Virus Protection Bypassing) (SecuriTeam)