CVE-2000-0428: Buffer Overflow
Buffer overflow in the SMTP gateway for InterScan Virus Wall 3.32 and earlier allows a remote attacker to execute arbitrary commands via a long filename for a uuencoded attachment.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable processing or acceptance of uuencoded attachments in the SMTP gateway. If disabling is not possible, configure the gateway to reject or quarantine uuencoded attachments to avoid triggering the buffer overflow via long filenames.
Trend Micro InterScan VirusWall (SMTP gateway) uuencoded attachment processing = disabled - Compensating control
At the mail perimeter, block or strip uuencoded attachments and/or implement mail-filter rules to reject attachments with excessively long filenames. Additionally, restrict access to the SMTP gateway to trusted IPs and networks until a vendor patch or official remediation is available.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0428?
CVE-2000-0428 is considered a high severity vulnerability due to the potential for remote code execution.
How do I fix CVE-2000-0428?
To fix CVE-2000-0428, you should upgrade to the latest version of Trend Micro InterScan Virus Wall that addresses this buffer overflow issue.
What software versions are affected by CVE-2000-0428?
CVE-2000-0428 affects Trend Micro InterScan Virus Wall versions 3.0.1, 3.2.3, 3.3, and 3.32 and earlier.
What type of attack does CVE-2000-0428 enable?
CVE-2000-0428 enables a remote attacker to execute arbitrary commands on the affected system.
Is CVE-2000-0428 still a risk today?
While CVE-2000-0428 is an older vulnerability, systems running the affected versions without patching remain at risk.