[ news_security_news ]
IDefense: TrendMicro ServerProtect Vulnerability
John Stith
Staff Writer
2005-12-15
 Security News RSS Feed
iDefense announced vulnerabilities in TrendMicro ServerProtect. The remote user can execute arbitrary code on the target system. The remote user will also be able to view files an cause denial of service conditions. Not good for a company who's supposed to stop this stuff.
The bulletin says:
Remote exploitation of an input validation vulnerability in Trend Micro Inc.'s ServerProtect Management Console allows remote attackers to view the contents of arbitrary files on the underlying system.
The problem specifically exists within the handling of the IMAGE parameter in the script rptserver.asp. The vulnerable area of code is outlined in the following snippet:
Set session("oEMF") = Server.CreateObject("CREmfgen.CREmfgen.2")
Call ParseQS()
if IMAGE <> "" then
Call session("oEMF").StreamImage(IMAGE, DEL)
Response.End
end if
An attacker can utilize directory traversal modifiers to traverse outside the system temporary directory and access any file on the same volume.
The analysis says:
Successful exploitation of the described vulnerability allows remote attackers to view the contents of arbitrary files on the underlying system. Exploitation does not require credentials thereby exacerbating the impact of this vulnerability.
"Trend Micro has become aware of a vulnerability related to Crystal Report, a reporting component found in Trend Micro Control Manager (v2.5 and v3.0). Under certain conditions, arbitrary files on the ReportServer volume inside Trend Micro Control Manager software could be viewed or accessed remotely. Trend Micro is currently consulting with
Crystal Report regarding permanent solutions to this reporting component. A temporary workaround solution can be recommended through contacting Trend Micro customer and technical support."
There are no known attacks at this point but that's not to say hackers aren't working on them. One of the biggest single areas worry remains the security of security networks. While attacks have been more limited to them, vulnerabilities like the one above tell us it won't take much time for them to defeat many of these companies.
About the Author:
John is a staff writer for SecurityProNews covering cyber security.
More news_security_news Articles
Security News RSS Feed
|
|
RSS
Archive
Contact Us
Advertise
