Trend Micro OfficeScan 3.0 - 6.0 has default permissions of Everyone Full Control on the installation directory and registry keys, which allows local users to disable virus protection.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Officescan | Trend_micro | 3.0 (including) | 3.0 (including) |
| Officescan | Trend_micro | corporate_3.5 (including) | corporate_3.5 (including) |
| Officescan | Trend_micro | corporate_3.11 (including) | corporate_3.11 (including) |
| Officescan | Trend_micro | corporate_3.13 (including) | corporate_3.13 (including) |
| Officescan | Trend_micro | corporate_3.54 (including) | corporate_3.54 (including) |
| Officescan | Trend_micro | corporate_5.02 (including) | corporate_5.02 (including) |
| Officescan | Trend_micro | corporate_5.58 (including) | corporate_5.58 (including) |
References
- http://marc.info/?l=bugtraq\u0026m=108395366909344\u0026w=2
- http://secunia.com/advisories/11576
- http://www.osvdb.org/5990
- http://www.securityfocus.com/bid/10300
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16092
- http://marc.info/?l=bugtraq\u0026m=108395366909344\u0026w=2
- http://secunia.com/advisories/11576
- http://www.osvdb.org/5990
- http://www.securityfocus.com/bid/10300
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16092