Overview
A remotely exploitable buffer overflow exists in Trend Micro InterScan eManager.
Description
Trend Micro InterScan eManager is an application that inspects email traffic flowing into and out of a network for confidential or inappropriate material entering and/or leaving the network. This application has the capability to inspect, modify, and/or block email at the border of the enterprise. Trend Micro InterScan eManager includes several dynamic link libraries which provide management features for the system administrator over an http interface. Some of these dynamic link libraries contain a remotely exploitable buffer overflow. |
Impact
Remote intruders can execute arbitrary code with SYSTEM privileges in the Local System security context. |
Solution
The following versions of InterScan eManager are affected.
These tests were performed on the following Operating Systems:
A patch for InterScan eManager for NT Ver.3.51J is available from http://www.trendmicro.co.jp/esolution/solutionDetail.asp?solutionID=3142 A patch for InterScan eManager for NT Ver.3.51 is pending. |
If console access via the web is not necessary, remove /eManager virtual directory with the use of Internet Service Manager.
|
Vendor Information
CVSS Metrics
| Group | Score | Vector |
|---|---|---|
| Base | ||
| Temporal | ||
| Environmental |
References
Acknowledgements
This vulnerability was discovered by Little eArth Corporation Co., Ltd and was made public on September 12, 2001.
This document was written by Ian A. Finlay.
Other Information
| CVE IDs: | CVE-2001-0958 |
| Severity Metric: | 33.75 |
| Date Public: | 2001-09-12 |
| Date First Published: | 2001-09-13 |
| Date Last Updated: | 2001-09-13 17:33 UTC |
| Document Revision: | 52 |