CVE-2004-2006: Medium severity trend micro officescan vulnerability
Trend Micro OfficeScan 3.0 - 6.0 has default permissions of "Everyone Full Control" on the installation directory and registry keys, which allows local users to disable virus protection.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-2006?
CVE-2004-2006 is considered a medium severity vulnerability due to the potential for unauthorized users to disable virus protection.
How do I fix CVE-2004-2006?
To fix CVE-2004-2006, modify the permissions of the installation directory and registry keys to restrict access from local users.
Which versions of Trend Micro OfficeScan are affected by CVE-2004-2006?
CVE-2004-2006 affects Trend Micro OfficeScan versions 3.0 through 5.58.
What is the impact of CVE-2004-2006?
The impact of CVE-2004-2006 is that local users can disable protection features, which may lead to exposure to malware.
Are there any known exploits for CVE-2004-2006?
While specific exploits may not be publicly documented, the vulnerability's nature suggests a straightforward method for local users to exploit it.