CVE-1999-0378: Medium severity Trend Micro InterScan VirusWall vulnerability
InterScan VirusWall for Solaris doesn't scan files for viruses when a single HTTP request includes two GET commands.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Block or filter single HTTP requests that include multiple GET commands at the network edge (WAF, reverse proxy, or firewall) to prevent requests that can bypass InterScan VirusWall scanning on Solaris.
- Operational
Monitor web server/proxy logs for HTTP requests containing multiple GET commands, identify any files transferred via such requests, quarantine and rescan those files, and contact Trend Micro for patch availability and further guidance.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0378?
CVE-1999-0378 is considered a medium severity vulnerability due to potential security risks associated with multiple GET requests.
How do I fix CVE-1999-0378?
To address CVE-1999-0378, ensure you update your Trend Micro InterScan VirusWall to the latest version that includes the necessary security patches.
Which software is affected by CVE-1999-0378?
CVE-1999-0378 affects Trend Micro InterScan VirusWall on Solaris systems.
What are the risks of not addressing CVE-1999-0378?
Not addressing CVE-1999-0378 could potentially allow malicious files to be transmitted through HTTP requests without being scanned for viruses.
Is there a workaround for CVE-1999-0378?
Currently, there are no known workarounds for CVE-1999-0378 besides updating to the patched version of the software.