Trend Micro InterScan VirusWall Unauthorized Proxy Connections Vulnerability

Bugtraq ID:	6321
Class:	Configuration Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 05 2002 12:00AM
Updated:	Dec 05 2002 12:00AM
Credit:	Discovery of this issue is credited to Aerasec Network Security.
Vulnerable:	Trend Micro InterScan VirusWall 3.6 Build 1182 Trend Micro InterScan VirusWall 3.6
Not Vulnerable:	Trend Micro InterScan VirusWall 3.7 Build 1190

Trend Micro InterScan VirusWall Unauthorized Proxy Connections Vulnerability

Trend Micro InterScan VirusWall (ISVW) is prone to an issue which may allow attackers to abuse the HTTP proxy to make unauthorized connections to arbitrary ports on any hosts that the proxy may access.

It is possible to exploit this issue using the CONNECT method to proxy an unauthorized connections to an arbitrary port on any host the proxy may access.

It should be noted that all platforms affected by this issue are not currently known. This BID will be updated as further information becomes available.

Trend Micro InterScan VirusWall Unauthorized Proxy Connections Vulnerability

There is no exploit code required.

Trend Micro InterScan VirusWall Unauthorized Proxy Connections Vulnerability

Solution:
The vendor has reportedly addressed this issue in Trend Micro InterScan VirusWall 3.7 Builds 1190 and later. Users should contact the vendor to determine if they are affected and for details on obtaining upgrades.

Trend Micro InterScan VirusWall Unauthorized Proxy Connections Vulnerability

References:

• Solution 13000 (Trend Micro)
  
• Proxy vulnerability in TrendMicro InterScan-VirusWall V3.6 (Volker Tanger )
  
• Re: Proxy vulnerability in TrendMicro InterScan-VirusWall V3.6 - and 3.7 Build 1 ("Dr. Peter Bieringer" )