PT-2002-1491 · Trend Micro · Trend Micro Interscan Viruswall Http Proxy

Published 2002-06-11 · Updated 2008-09-10 · CVE-2002-0440

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Trend Micro InterScan VirusWall HTTP proxy version 3.6

Description The issue allows malicious web servers to bypass content scanning by setting the Content-length header to 0. This is often ignored by HTTP clients, enabling the bypass.

Recommendations For Trend Micro InterScan VirusWall HTTP proxy version 3.6, consider disabling the "Skip scanning if Content-length equals 0" option to prevent malicious web servers from bypassing content scanning.

Exploit

Fix

Related Identifiers

CVE-2002-0440

Affected Products

Trend Micro Interscan Viruswall Http Proxy

References · 7

• 🔥 https://exploit-db.com/exploits/21339 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-0440 · Security Note
• http://securityfocus.com/bid/4265 · Vendor Advisory
• http://inside-security.de/vwall_cl0.html · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0440 · Note
• http://iss.net/security_center/static/8425.php · Note
• http://seclists.org/lists/bugtraq/2002/Mar/0162.html · Note