Buffer overflows in eManager plugin for Trend Micro InterScan VirusWall for NT 3.51 and 3.51J allow remote attackers to execute arbitrary code via long arguments to the CGI programs (1) register.dll, (2) ContentFilter.dll, (3) SFNofitication.dll, (4) register.dll, (5) TOP10.dll, (6) SpamExcp.dll, and (7) spamrule.dll.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Interscan_emanager | Trend_micro | 3.51 (including) | 3.51 (including) |
| Interscan_emanager | Trend_micro | 3.51_j (including) | 3.51_j (including) |
| Interscan_viruswall | Trend_micro | 3.0.1 (including) | 3.0.1 (including) |
| Interscan_viruswall | Trend_micro | 3.2.3 (including) | 3.2.3 (including) |
| Interscan_viruswall | Trend_micro | 3.3 (including) | 3.3 (including) |
| Interscan_viruswall | Trend_micro | 3.32 (including) | 3.32 (including) |
References
- http://archives.neohapsis.com/archives/bugtraq/2001-09/0099.html
- http://www.securityfocus.com/bid/3327
- http://www.trendmicro.co.jp/esolution/solutionDetail.asp?solutionID=3142
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7104
- http://archives.neohapsis.com/archives/bugtraq/2001-09/0099.html
- http://www.securityfocus.com/bid/3327
- http://www.trendmicro.co.jp/esolution/solutionDetail.asp?solutionID=3142
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7104