Directory Permissions Flaw in Trend Micro InterScan VirusWall
CVE-2000-1106

Currently unrated

Key Information:

Vendor
CVE Published:
9 January 2001

What is CVE-2000-1106?

Trend Micro's InterScan VirusWall has a security vulnerability due to the creation of an 'Intscan' share within the 'InterScan' directory. This share is configured with permissions that allow Full Control to the Everyone group, posing a significant risk. Attackers can exploit this misconfiguration to alter VirusWall programs, leading to unauthorized access and potential exploitation of the system. Organizations using this product should take immediate action to secure their configurations to prevent unauthorized privilege escalation.

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.