PT-2001-2110 · Trend Micro · Femanager+7

Publicado 2001-09-12 · Atualizado 2017-12-19 · CVE-2001-0958

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Trend Micro InterScan VirusWall for NT versions 3.51 and 3.51J

Description The issue allows remote attackers to execute arbitrary code due to buffer overflows in the eManager plugin. This is achieved by providing long arguments to various CGI programs, including "register.dll", "ContentFilter.dll", "SFNofitication.dll", "TOP10.dll", "SpamExcp.dll", and "spamrule.dll".

Recommendations For Trend Micro InterScan VirusWall for NT versions 3.51 and 3.51J, consider disabling the eManager plugin until a patch is available to prevent exploitation of the buffer overflows in the CGI programs. Restrict access to the affected CGI programs to minimize the risk of arbitrary code execution.

Exploit

Correção

Identificadores relacionados

CVE-2001-0958

Produtos afetados

Contentfilter.Dll

Sfnofitication.Dll

Spamexcp.Dll

Top10.Dll

Trend Micro Interscan Viruswall

Femanager

Register.Dll

Spamrule.Dll

Referências · 6

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2001-09/0099.html · Exploit
• http://securityfocus.com/bid/3327 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2001-0958 · Nota de Segurança
• http://trendmicro.co.jp/esolution/solutionDetail.asp?solutionID=3142 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7104 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0958 · Nota