trend micro scanmail vulnerabilities and exploits

(subscribe to this query)

5

CVSSv2

Trend Micro ScanMail for Microsoft Exchange (SMEX) 10.2 before Hot Fix Build 3318 and 11.0 before Hot Fix Build 4180 creates session IDs for the web console using a random number generator with predictable values, which makes it easier for remote malicious users to bypass authent...

Trend Micro Scanmail 11.0 Trend Micro Scanmail 10.2

5

CVSSv2

Trend ScanMail allows remote malicious users to obtain potentially sensitive information or disable the anti-virus capability via the smency.nsf file.

Trend Micro Scanmail Domino 2.51 Trend Micro Scanmail Domino 2.6

1 EDB exploit

7.5

CVSSv2

Trend Micro ScanMail for Exchange (SMEX) prior to 3.81 and prior to 6.1 might install a back door account in smg_Smxcfg30.exe, which allows remote malicious users to gain access to the web management interface via the vcc parameter, possibly "3560121183d3".

Trend Micro Scanmail

1 EDB exploit

7.5

CVSSv2

Heap-based buffer overflow in Trend Micro AntiVirus Library VSAPI prior to 7.510, as used in multiple Trend Micro products, allows remote malicious users to execute arbitrary code via a crafted ARJ file with long header file names that modify pointers within a structure.

4.6

CVSSv2

TrendMicro ScanMail for Exchange 3.5 Evaluation allows a local malicious user to recover the administrative credentials for ScanMail via a combination of unprotected registry keys and weakly encrypted passwords.

Trend Micro Scanmail Exchange 3.5

9.3

CVSSv2

Buffer overflow in the Trend Micro Scan Engine 8.000 and 8.300 before virus pattern file 4.245.00, as used in other products such as Cyber Clean Center (CCC) Cleaner, allows remote malicious users to execute arbitrary code via a malformed UPX compressed executable.

Trend Micro Control Manager Gold Trend Micro Interscan Emanager 3.51 J Trend Micro Interscan Emanager 3.6 Trend Micro Interscan Messaging Security Suite Gold Trend Micro Interscan Viruswall 3.6 Trend Micro Interscan Viruswall 3.6.0 Build 1182 Trend Micro Interscan Viruswall 3.6.0 Build1166 Trend Micro Interscan Viruswall 3.8.0 Build1130 Trend Micro Interscan Viruswall 3.81 Trend Micro Interscan Viruswall For Windows Nt 3.4 Trend Micro Interscan Viruswall For Windows Nt 3.5 Trend Micro Interscan Web Security Suite Trend Micro Interscan Web Security Suite Gold Trend Micro Officescan 3.0 Trend Micro Officescan 4.5.0 Trend Micro Officescan Corporate 3.13 Trend Micro Officescan Corporate 3.5 Trend Micro Control Manager 2.5.0 Trend Micro Control Manager 3.5 Trend Micro Interscan Emanager 3.5 Trend Micro Interscan Emanager 3.51 Trend Micro Interscan Messaging Security Suite 5.5 Build 1183

6.4

CVSSv2

A vulnerability in Trend Micro ScanMail for Exchange 12.0 exists in which some communications to the update servers are not encrypted.

Trendmicro Scanmail 12.0

4.3

CVSSv2

The Log Query and Quarantine Query pages in Trend Micro ScanMail for Exchange 12.0 are vulnerable to cross site scripting (XSS) attacks.

Trendmicro Scanmail 12.0

6.8

CVSSv2

The absence of Anti-CSRF tokens in Trend Micro ScanMail for Exchange 12.0 web interface forms could allow an malicious user to submit authenticated requests when an authenticated user browses an attacker-controlled domain.

Trendmicro Scanmail 12.0

7.6

CVSSv2

A vulnerability in Trend Micro ScanMail for Exchange 12.0 exists in which certain specific installations that utilize a uncommon feature - Other Update Sources - could be exploited to overwrite sensitive files in the ScanMail for Exchange directory.

Trendmicro Scanmail 12.0

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook