PT-2007-2299 · Trend Micro · Trend Micro Damage Cleanup Server+7

Publicado 2007-02-08 · Atualizado 2017-07-29 · CVE-2007-0856

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Trend Micro Anti-Rootkit Common Module (RCM) version 1.5.0.1052 Trend Micro PC-cillin Internet Security 2007 Trend Micro Antivirus 2007 Trend Micro Anti-Spyware for SMB 3.2 SP1 Trend Micro Anti-Spyware for Consumer 3.5 Trend Micro Anti-Spyware for Enterprise 3.0 SP2 Trend Micro Client / Server / Messaging Security for SMB 3.5 Trend Micro Damage Cleanup Services 3.2

Description: The issue allows local users to access privileged IOCTLs and execute arbitrary code or overwrite arbitrary memory in the kernel context due to the assignment of Everyone write permission for the .TmComm DOS device interface.

Recommendations: For Trend Micro Anti-Rootkit Common Module (RCM) version 1.5.0.1052, consider restricting access to the TmComm.sys module until a patch is available. For Trend Micro PC-cillin Internet Security 2007, update the VsapiNI.sys scan engine to a version that does not assign Everyone write permission for the .TmComm DOS device interface. For Trend Micro Antivirus 2007, Anti-Spyware for SMB 3.2 SP1, Anti-Spyware for Consumer 3.5, Anti-Spyware for Enterprise 3.0 SP2, Client / Server / Messaging Security for SMB 3.5, and Damage Cleanup Services 3.2, apply configuration changes to limit the permissions assigned to the .TmComm DOS device interface. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2007-0856

Produtos afetados

Trend Micro Anti-Rootkit Common Module

Trend Micro Anti-Spyware For Consumer

Trend Micro Anti-Spyware For Enterprise

Trend Micro Anti-Spyware For Smb

Trend Micro Antivirus 2007

Trend Micro Client / Server / Messaging Security

Trend Micro Damage Cleanup Server

Trend Micro Pc-Cillin Internet Security 2007

Referências · 14

• https://nvd.nist.gov/vuln/detail/CVE-2007-0856 · Nota de Segurança
• http://osvdb.org/33039 · Nota
• http://kb.cert.org/vuls/id/666800 · Nota
• http://secunia.com/advisories/24069 · Aviso do Fabricante
• http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1034432&id=EN-1034432 · Correção
• http://securitytracker.com/id?1017606 · Nota
• http://securityfocus.com/bid/22448 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32353 · Nota
• http://securitytracker.com/id?1017605 · Nota
• http://vupen.com/english/advisories/2007/0521 · Nota
• http://securitytracker.com/id?1017604 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0856 · Nota
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=469 · Aviso do Fabricante
• http://kb.cert.org/vuls/id/282240 · Nota