PT-2006-1699 · Trend Micro · Trend Micro Serverprotect

Publicado 2006-02-10 · Atualizado 2018-10-19 · CVE-2006-0642

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Média

Vetor base

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Trend Micro ServerProtect version 5.58

Description The default configuration setting of "Do not scan compressed files when Extracted file count exceeds 500 files" may be too low, allowing remote attackers to bypass anti-virus checks by sending compressed archives containing many small files.

Recommendations For Trend Micro ServerProtect version 5.58, consider increasing the extracted file count limit to a higher value to prevent attackers from bypassing anti-virus checks. As a temporary workaround, monitor the system for messages indicating that the compressed file exceeds specified limits and manually inspect such files to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2006-0642

Produtos afetados

Trend Micro Serverprotect

Referências · 11

• http://securityfocus.com/archive/1/423896/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0642 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0642 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24658 · Nota
• http://securityfocus.com/archive/1/423914/100/0/threaded · Nota
• http://packetstormsecurity.org/filedesc/Bypass.pdf.html · Aviso do Fabricante
• http://packetstormsecurity.org/0602-advisories/Bypass.pdf · Aviso do Fabricante
• http://securityfocus.com/archive/1/424598/100/0/threaded · Nota
• http://securityfocus.com/bid/16483 · Nota
• http://securityfocus.com/archive/1/424172/100/0/threaded · Nota
• http://securityfocus.com/archive/1/423913/100/0/threaded · Nota