CVE-2000-0205: Medium severity Trend Micro OfficeScan vulnerability
Trend Micro OfficeScan allows remote attackers to replay administrative commands and modify the configuration of OfficeScan clients.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Restrict network access to Trend Micro OfficeScan management/administrative interfaces to trusted IPs and networks (firewall rules, ACLs, VPN only, network segmentation) to prevent remote attackers from reaching the admin service.
- Operational
Audit OfficeScan client and server configurations for unauthorized changes, restore any altered configurations from known-good backups, and enable/implement monitoring/alerting for administrative command activity to detect replay or tampering.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0205?
CVE-2000-0205 has a medium severity as it allows remote attackers to replay commands that can potentially compromise the configuration of OfficeScan clients.
How do I fix CVE-2000-0205?
To mitigate CVE-2000-0205, upgrade to a patched version of Trend Micro OfficeScan or apply relevant security patches provided by Trend Micro.
What software versions are affected by CVE-2000-0205?
CVE-2000-0205 specifically affects Trend Micro OfficeScan version 3.5.
What kind of attacks can be executed using CVE-2000-0205?
Attackers can execute replay attacks to manipulate administrative commands, potentially altering the configuration of OfficeScan clients.
Is CVE-2000-0205 still a relevant threat today?
While CVE-2000-0205 is an older vulnerability, any unpatched systems running the affected software remain at risk.