PT-2009-1213 · Trend Micro · Trend Micro Officescan+2

Publicado 2009-01-21 · Atualizado 2018-10-11 · CVE-2008-3864

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Trend Micro OfficeScan version 8.0 SP1 Patch 1 Trend Micro Internet Security versions 2007 and 2008 17.0.1224

Description The issue concerns the ApiThread function in the firewall service of Trend Micro Network Security Component modules. It allows remote attackers to cause a denial of service by crashing the service with a packet containing a large value in an unspecified size field.

Recommendations For Trend Micro OfficeScan version 8.0 SP1 Patch 1, consider disabling the ApiThread function in the firewall service as a temporary workaround until a patch is available. For Trend Micro Internet Security versions 2007 and 2008 17.0.1224, restrict access to the firewall service to minimize the risk of exploitation.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2008-3864

Produtos afetados

Trend Micro Internet Security

Trend Micro Home Network Security

Trend Micro Officescan

Referências · 13

• http://secunia.com/advisories/31160 · Aviso do Fabricante
• http://securitytracker.com/id?1021614 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-3864 · Nota de Segurança
• http://securityfocus.com/archive/1/500195/100/0/threaded · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3864 · Nota
• http://securityreason.com/securityalert/4937 · Nota
• http://secunia.com/advisories/33609 · Aviso do Fabricante
• http://securitytracker.com/id?1021615 · Nota
• http://vupen.com/english/advisories/2009/0191 · Nota
• http://secunia.com/secunia_research/2008-42 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/48106 · Nota
• http://securityfocus.com/bid/33358 · Correção
• http://trendmicro.com/ftp/documentation/readme/OSCE8.0_SP1_Patch1_CriticalPatch_3191_Readme.txt · Aviso do Fabricante