xfocus logo xfocus title
首页 焦点原创 安全文摘 安全工具 安全漏洞 焦点项目 焦点论坛 关于我们
English Version

Trend Micro OfficeScan CGI目录权限错误漏洞


发布时间:2003-01-15
更新时间:2003-01-15
严重程度:
威胁程度:其它
错误类型:访问验证错误
利用方式:服务器模式

BUGTRAQ ID:6616

受影响系统
Trend Micro OfficeScan Corporate Edition 3.0
   -Microsoft Windows 3.1
   -Microsoft Windows 2000 Workstation
   -Microsoft Windows 95
   -Microsoft Windows 98
   -Microsoft Windows NT 4.0
   -Novell Netware 4.1
   -Novell Netware 4.11
Trend Micro OfficeScan Corporate Edition 3.5
   -Microsoft Windows 3.1
   -Microsoft Windows 2000 Workstation
   -Microsoft Windows 95
   -Microsoft Windows 98
   -Microsoft Windows NT 4.0
   -Novell Netware 4.1
   -Novell Netware 4.11
Trend Micro OfficeScan Corporate Edition 3.11
   -Microsoft Windows 3.1
   -Microsoft Windows 2000 Workstation
   -Microsoft Windows 95
   -Microsoft Windows 98
   -Microsoft Windows NT 4.0
   -Novell Netware 4.1
   -Novell Netware 4.11
Trend Micro OfficeScan Corporate Edition 3.13
   -Microsoft Windows 3.1
   -Microsoft Windows 2000 Workstation
   -Microsoft Windows 95
   -Microsoft Windows 98
   -Microsoft Windows NT 4.0
   -Novell Netware 4.1
   -Novell Netware 4.11
Trend Micro OfficeScan Corporate Edition 3.54
   -Microsoft Windows 2000 Workstation
   -Microsoft Windows 2000 Workstation SP1
   -Microsoft Windows 2000 Workstation SP2
   -Microsoft Windows 95
   -Microsoft Windows 98
   -Microsoft Windows 98SE
   -Microsoft Windows ME
   -Microsoft Windows NT 4.0 SP3
   -Microsoft Windows NT 4.0 SP4
   -Microsoft Windows NT 4.0 SP5
   -Microsoft Windows NT 4.0 SP6a
   -Novell Netware 3.1.2
   -Novell Netware 4.1
   -Novell Netware 4.11
   -Novell Netware 5.0
   -Novell Netware 5.1
Trend Micro OfficeScan Corporate Edition for Windows NT Server
3.0
   -Microsoft Windows NT 4.0
Trend Micro OfficeScan Corporate Edition for Windows NT Server
3.1.1
   -Microsoft Windows NT 4.0
Trend Micro OfficeScan Corporate Edition for Windows NT Server
3.5
   -Microsoft Windows NT 4.0
Trend Micro OfficeScan Corporate Edition for Windows NT Server
3.11
   -Microsoft Windows NT 4.0
Trend Micro OfficeScan Corporate Edition for Windows NT Server
3.13
   -Microsoft Windows NT 4.0
Trend Micro Virus Buster Corporate Edition 3.52
   -Microsoft Windows 2000 Server Japanese Edition
Trend Micro Virus Buster Corporate Edition 3.53
   -Microsoft Windows 2000 Server Japanese Edition
Trend Micro Virus Buster Corporate Edition 3.54
   -Microsoft Windows 2000 Server Japanese Edition
详细描述
Trend Micro OfficeScan存在一个漏洞,远程攻击者可以访问OfficeScan安装的cgi目录里的程序。

相关信息
发现者:Rod Boron <rod_boron@yahoo.com>