PT-2008-5204 · Trend Micro · Trend Micro Officescan

Published 2008-10-23 · Updated 2018-10-11 · CVE-2008-3862

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Trend Micro OfficeScan versions 7.3 Patch 4 build 1367 through 7.3 Patch 4 build 1373 Trend Micro OfficeScan version 8.0 SP1 Patch 1 before build 3110

Description The issue is related to a stack-based buffer overflow in CGI programs within the server, allowing remote attackers to execute arbitrary code via an HTTP POST request containing crafted form data. This is related to the parsing of CGI requests.

Recommendations For Trend Micro OfficeScan versions 7.3 Patch 4 build 1367 through 7.3 Patch 4 build 1373, update to build 1374 or later. For Trend Micro OfficeScan version 8.0 SP1 Patch 1 before build 3110, update to build 3110 or later. As a temporary workaround, consider restricting access to CGI programs within the server to minimize the risk of exploitation.

Fix

RCE

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2008-3862

Affected Products

Trend Micro Officescan

References · 11

• http://trendmicro.com/ftp/documentation/readme/OSCE_7.3_CriticalPatch_B1374_readme.txt · Patch
• http://trendmicro.com/ftp/documentation/readme/OSCE_8.0_sp1p1_CriticalPatch_B3110_readme.txt · Patch
• http://secunia.com/secunia_research/2008-40 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-3862 · Security Note
• http://secunia.com/advisories/32005 · Vendor Advisory
• http://securityfocus.com/archive/1/497650/100/0/threaded · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3862 · Note
• http://securityfocus.com/bid/31859 · Note
• http://securityreason.com/securityalert/4489 · Note
• http://securitytracker.com/id?1021093 · Note
• http://vupen.com/english/advisories/2008/2892 · Note