PT-2001-2110 · Trend Micro · Femanager+7

Published 2001-09-12 · Updated 2017-12-19 · CVE-2001-0958

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Trend Micro InterScan VirusWall for NT versions 3.51 and 3.51J

Description The issue allows remote attackers to execute arbitrary code due to buffer overflows in the eManager plugin. This is achieved by providing long arguments to various CGI programs, including "register.dll", "ContentFilter.dll", "SFNofitication.dll", "TOP10.dll", "SpamExcp.dll", and "spamrule.dll".

Recommendations For Trend Micro InterScan VirusWall for NT versions 3.51 and 3.51J, consider disabling the eManager plugin until a patch is available to prevent exploitation of the buffer overflows in the CGI programs. Restrict access to the affected CGI programs to minimize the risk of arbitrary code execution.

Exploit

Fix

Related Identifiers

CVE-2001-0958

Affected Products

Contentfilter.Dll

Sfnofitication.Dll

Spamexcp.Dll

Top10.Dll

Trend Micro Interscan Viruswall

Femanager

Register.Dll

Spamrule.Dll

References · 6

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2001-09/0099.html · Exploit
• http://securityfocus.com/bid/3327 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-0958 · Security Note
• http://trendmicro.co.jp/esolution/solutionDetail.asp?solutionID=3142 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7104 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0958 · Note