CVE-2000-0033: Medium severity Trend Micro InterScan VirusWall vulnerability
InterScan VirusWall SMTP scanner does not properly scan messages with malformed attachments.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable the SMTP scanning feature in InterScan VirusWall to avoid relying on the vulnerable scanner until Trend Micro issues a fix or update.
Trend Micro InterScan VirusWall (SMTP scanner) SMTP scanning enabled = false - Compensating control
At the email gateway or perimeter, block, quarantine, or strip email attachments (or specific risky attachment types); and/or route incoming SMTP traffic through an alternate antivirus/SMTP scanning service to ensure attachments (including malformed ones) are scanned.
- Operational
Monitor Trend Micro security advisories for a patch or fixed version addressing SMTP scanner handling of malformed attachments and apply the vendor update immediately when available. After updating, validate that SMTP attachment scanning correctly handles malformed attachments.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0033?
CVE-2000-0033 is categorized as a high-severity vulnerability due to its potential to allow malware to bypass scanning safeguards.
How do I fix CVE-2000-0033?
To fix CVE-2000-0033, upgrade your Trend Micro InterScan VirusWall to a version that addresses this scanning vulnerability.
Which versions of InterScan VirusWall are affected by CVE-2000-0033?
CVE-2000-0033 affects version 3.0.1 of Trend Micro InterScan VirusWall.
What type of vulnerability is CVE-2000-0033?
CVE-2000-0033 is a vulnerability in the email scanning functionality of InterScan VirusWall that fails to properly handle malformed attachments.
Is there any workaround for CVE-2000-0033?
As a temporary workaround for CVE-2000-0033, users can avoid scanning emails with unknown or untrusted attachments until a patch is applied.