PT-2009-3938 · Trend Micro · Trend Micro Officescan Client+1

Published 2009-04-27 · Updated 2018-10-10 · CVE-2009-1435

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Trend Micro OfficeScan Client versions 8.0 SP1 through 8.0 SP1 Patch 1

Description A security issue in Trend Micro OfficeScan Client can be exploited by malicious, local users to cause a denial of service. The issue is caused by an error when scanning directories with overly long pathnames, which can terminate the NTRtScan.exe process and temporarily disable real-time scanning protection.

Recommendations For Trend Micro OfficeScan Client versions 8.0 SP1 through 8.0 SP1 Patch 1, consider restricting access to directories that could be used to exploit this issue, such as those with overly long pathnames, until a patch is available. As a temporary workaround, avoid scanning specially crafted directories that could cause the NTRtScan.exe process to terminate.

Exploit

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2009-1435

Affected Products

Trend Micro Officescan Client

Trend Micro Officescan Server

References · 11

• 🔥 http://securityfocus.com/bid/34642 · Exploit
• 🔥 http://es.geocities.com/jplopezy/officescan.zip · Exploit
• 🔥 http://osvdb.org/53890 · Exploit
• 🔥 https://exploit-db.com/exploits/32939 · Exploit
• 🔥 http://securitytracker.com/id?1022109 · Exploit
• http://vupen.com/english/advisories/2009/1146 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-1435 · Security Note
• http://secunia.com/advisories/34737 · Vendor Advisory
• http://securityfocus.com/archive/1/502860/100/0/threaded · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1435 · Note
• http://securityfocus.com/archive/1/502847/100/0/threaded · Note