• info
• discussion
• exploit
• solution
• references

Trend Micro OfficeScan Management Console Authentication Bypass Vulnerability

Solution:
The vendor has released patches to address this issue. Please see the references for more information.


Trend Micro OfficeScan Corporate Edition 6.0

• Trend Micro csm_20_osce_60_win_en_securitypatch_b1398.exe
  http://www.trendmicro.com/ftp/products/patches/csm_20_osce_60_win_en_s ecuritypatch_b1398.exe

Trend Micro OfficeScan Corporate Edition 7.3

• Trend Micro osce_73_win_en_securitypatch_b1293.exe
  http://www.trendmicro.com/ftp/products/patches/osce_73_win_en_security patch_b1293.exe

Trend Micro Client Server Messaging Security for SMB 3.5

• Trend Micro csm_35_osce_75_win_en_securitypatch_b1152.exe
  http://www.trendmicro.com/ftp/products/patches/csm_35_osce_75_win_en_s ecuritypatch_b1152.exe


• Trend Micro csm_36_osce_76_win_en_securitypatch_b1149.exe
  http://www.trendmicro.com/ftp/products/patches/csm_36_osce_76_win_en_s ecuritypatch_b1149.exe

Trend Micro Client Server Messaging Security for SMB 3.0

• Trend Micro csm_30_osce_72_win_en_securitypatch_b1209.exe
  http://www.trendmicro.com/ftp/products/patches/csm_30_osce_72_win_en_s ecuritypatch_b1209.exe

Trend Micro OfficeScan Corporate Edition 8.0

• Trend Micro osce_80_win_en_securitypatch-b1042.exe
  http://www.trendmicro.com/ftp/products/patches/osce_80_win_en_security patch-b1042.exe

Trend Micro OfficeScan Corporate Edition 6.5

• Trend Micro osce_65_win_en_securitypatch_b1458.exe
  http://www.trendmicro.com/ftp/products/patches/osce_65_win_en_security patch_b1458.exe

Trend Micro OfficeScan Corporate Edition 7.0

• Trend Micro osce_70_win_en_securitypatch_b1364.exe
  http://www.trendmicro.com/ftp/products/patches/osce_70_win_en_security patch_b1364.exe