Trend Micro InterScan VirusWall HTTP 1.1 Transfer-Encoding Bypass Vulnerability
BID:5697
Info
Trend Micro InterScan VirusWall HTTP 1.1 Transfer-Encoding Bypass Vulnerability
| Bugtraq ID: | 5697 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 12 2002 12:00AM |
| Updated: | Sep 12 2002 12:00AM |
| Credit: | Discovery credited to Vincent Royer of Althes. |
| Vulnerable: |
Trend Micro Interscan Viruswall (Linux) 3.6 Trend Micro InterScan VirusWall 3.52 |
| Not Vulnerable: | |
Discussion
Trend Micro InterScan VirusWall HTTP 1.1 Transfer-Encoding Bypass Vulnerability
InterScan VirusWall does not include support for HTTP 1.1 Transfer-Encoding, allowing for malicious files, transferred using this method, to bypass scanning procedures.
InterScan VirusWall does not include support for HTTP 1.1 Transfer-Encoding, allowing for malicious files, transferred using this method, to bypass scanning procedures.
Exploit / POC
Trend Micro InterScan VirusWall HTTP 1.1 Transfer-Encoding Bypass Vulnerability
No exploit is required for this vulnerability.
A demo server has been provided by Althes:
http://www.althes.fr/virustest/index.html
No exploit is required for this vulnerability.
A demo server has been provided by Althes:
http://www.althes.fr/virustest/index.html
Solution / Fix
Trend Micro InterScan VirusWall HTTP 1.1 Transfer-Encoding Bypass Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Trend Micro InterScan VirusWall HTTP 1.1 Transfer-Encoding Bypass Vulnerability
References:
References:
- InterScan VirusWall Product Home Page (Trend Micro)