Description
Two Vulnerabilities was found in Trend
Micro OfficeScan
1) Buffer overflow error in the CGI modules (CGIOCommon.dll) can
be exploited by attackers for execute arbitrary code with privileges
of the web user.
2) Error in Authentication process (cgiChkMasterPwd.exe) within
the OfficeScan Management Console can be exploited by attackers to
bypass authentication and gain unauthorized access to the OfficeScan
management Console.
Product
affected
OfficeScan 7.0
OfficeScan 7.3
OfficeScan 8.0
Solution
It is suggested to apply latest patches immediately.
OfficeScan 7.0:
http://www.trendmicro.com/ftp/products/patches/osce_70_win_en_securitypatch_b1364.exe
OfficeScan 7.3:
http://www.trendmicro.com/ftp/products/patches/osce_73_win_en_securitypatch_b1293.exe
OfficeScan 8.0:
http://www.trendmicro.com/ftp/products/patches/osce_80_win_en_securitypatch-b1042.exe
Source
TrendMicro
Suggested Solutions
Patch Management System: Shavlik's
HFNetChkPro, Patchlink's
PatchLink Update, Altiris Client Management Suite
| Free
Seminar (Seats are Limited !!) |
Barracuda
- Reclaim Your Email & Secure Your Network in Today's Enterprise |