InterScan VirusWall 文件名转换器缓冲区溢出漏洞

漏洞信息详情

InterScan VirusWall 文件名转换器缓冲区溢出漏洞

• CNNVD编号：CNNVD-200005-025
• 危害等级： 超危
  
  
• CVE编号：
  CVE-2000-0428
  
• 漏洞类型：
  
  
  缓冲区溢出
  
• 发布时间：
  
  2000-05-04
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2005-05-02
  
• 厂        商：
  
  trend_micro
• 漏洞来源：
  Discovered by Barn…

InterScan Virus Wall 3.32和早期版本的SMTP网关存在缓冲区溢出漏洞，远程攻击者可以通过转换器附件的超长文件名执行任意命令。

Trend Micro has rectified this issue with the release of InterScan VirusWall 3.4 Beta and a patch.
Trend Micro InterScan VirusWall 3.0.1

• Trend Micro isvw34beta
  ftp://ftp.antivirus.com/products/beta/isvw34beta.zip

Trend Micro InterScan VirusWall 3.2.3

• Trend Micro isvw326patchFor users who are upgrading from 3.2x only.
  
  http://a240.g.akamai.net/7/240/537/0000363/download.antivirus.com/ftp/
  products/patches/isvw326patch.zip
• Trend Micro isvw34beta
  ftp://ftp.antivirus.com/products/beta/isvw34beta.zip

Trend Micro InterScan VirusWall 3.3

• Trend Micro isvw34beta
  ftp://ftp.antivirus.com/products/beta/isvw34beta.zip

Trend Micro InterScan VirusWall 3.32

• Trend Micro isvw34beta
  ftp://ftp.antivirus.com/products/beta/isvw34beta.zip

来源: BID
名称: 1168
链接:http://www.securityfocus.com/bid/1168

来源: NAI
名称: 20000503 Trend Micro InterScan VirusWall Remote Overflow
链接:http://www.nai.com/nai_labs/asp_set/advisory/39_Trend.asp