PT-2009-3938 · Trend Micro · Trend Micro Officescan Client+1

Publicado 2009-04-27 · Atualizado 2018-10-10 · CVE-2009-1435

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Trend Micro OfficeScan Client versions 8.0 SP1 through 8.0 SP1 Patch 1

Description A security issue in Trend Micro OfficeScan Client can be exploited by malicious, local users to cause a denial of service. The issue is caused by an error when scanning directories with overly long pathnames, which can terminate the NTRtScan.exe process and temporarily disable real-time scanning protection.

Recommendations For Trend Micro OfficeScan Client versions 8.0 SP1 through 8.0 SP1 Patch 1, consider restricting access to directories that could be used to exploit this issue, such as those with overly long pathnames, until a patch is available. As a temporary workaround, avoid scanning specially crafted directories that could cause the NTRtScan.exe process to terminate.

Exploit

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2009-1435

Produtos afetados

Trend Micro Officescan Client

Trend Micro Officescan Server

Referências · 11

• 🔥 http://securityfocus.com/bid/34642 · Exploit
• 🔥 http://es.geocities.com/jplopezy/officescan.zip · Exploit
• 🔥 http://osvdb.org/53890 · Exploit
• 🔥 https://exploit-db.com/exploits/32939 · Exploit
• 🔥 http://securitytracker.com/id?1022109 · Exploit
• http://vupen.com/english/advisories/2009/1146 · Aviso do Fabricante
• http://securityfocus.com/archive/1/502860/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-1435 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1435 · Nota
• http://securityfocus.com/archive/1/502847/100/0/threaded · Nota
• http://secunia.com/advisories/34737 · Aviso do Fabricante