PT-2002-1491 · Trend Micro · Trend Micro Interscan Viruswall Http Proxy

Publicado 2002-06-11 · Atualizado 2008-09-10 · CVE-2002-0440

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Trend Micro InterScan VirusWall HTTP proxy version 3.6

Description The issue allows malicious web servers to bypass content scanning by setting the Content-length header to 0. This is often ignored by HTTP clients, enabling the bypass.

Recommendations For Trend Micro InterScan VirusWall HTTP proxy version 3.6, consider disabling the "Skip scanning if Content-length equals 0" option to prevent malicious web servers from bypassing content scanning.

Exploit

Correção

Identificadores relacionados

CVE-2002-0440

Produtos afetados

Trend Micro Interscan Viruswall Http Proxy

Referências · 7

• 🔥 https://exploit-db.com/exploits/21339 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-0440 · Nota de Segurança
• http://securityfocus.com/bid/4265 · Aviso do Fabricante
• http://inside-security.de/vwall_cl0.html · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0440 · Nota
• http://iss.net/security_center/static/8425.php · Nota
• http://seclists.org/lists/bugtraq/2002/Mar/0162.html · Nota