PT-2008-5204 · Trend Micro · Trend Micro Officescan

Publicado 2008-10-23 · Atualizado 2018-10-11 · CVE-2008-3862

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Trend Micro OfficeScan versions 7.3 Patch 4 build 1367 through 7.3 Patch 4 build 1373 Trend Micro OfficeScan version 8.0 SP1 Patch 1 before build 3110

Description The issue is related to a stack-based buffer overflow in CGI programs within the server, allowing remote attackers to execute arbitrary code via an HTTP POST request containing crafted form data. This is related to the parsing of CGI requests.

Recommendations For Trend Micro OfficeScan versions 7.3 Patch 4 build 1367 through 7.3 Patch 4 build 1373, update to build 1374 or later. For Trend Micro OfficeScan version 8.0 SP1 Patch 1 before build 3110, update to build 3110 or later. As a temporary workaround, consider restricting access to CGI programs within the server to minimize the risk of exploitation.

Correção

RCE

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2008-3862

Produtos afetados

Trend Micro Officescan

Referências · 11

• http://trendmicro.com/ftp/documentation/readme/OSCE_7.3_CriticalPatch_B1374_readme.txt · Correção
• http://trendmicro.com/ftp/documentation/readme/OSCE_8.0_sp1p1_CriticalPatch_B3110_readme.txt · Correção
• http://secunia.com/secunia_research/2008-40 · Aviso do Fabricante
• http://securityfocus.com/archive/1/497650/100/0/threaded · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3862 · Nota
• http://securityfocus.com/bid/31859 · Nota
• http://securityreason.com/securityalert/4489 · Nota
• http://securitytracker.com/id?1021093 · Nota
• http://vupen.com/english/advisories/2008/2892 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-3862 · Nota de Segurança
• http://secunia.com/advisories/32005 · Aviso do Fabricante