First published: Mon Oct 09 2006(Updated: )
Trend Micro OfficeScan 6.0 in Client/Server/Messaging (CSM) Suite for SMB 2.0 before 6.0.0.1385, and OfficeScan Corporate Edition (OSCE) 6.5 before 6.5.0.1418, 7.0 before 7.0.0.1257, and 7.3 before 7.3.0.1053 allow remote attackers to remove OfficeScan clients via a certain HTTP request that invokes the OfficeScan CGI program.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Trend Micro OfficeScan Corporate Edition | =7.0 | |
Trend Micro OfficeScan Corporate Edition | =6.5 | |
Trend Micro OfficeScan Corporate Edition | =7.3 |
http://www.trendmicro.com/ftp/documentation/readme/osce_6.5_win_en_securitypatch_1418_readme.txt
http://www.trendmicro.com/ftp/documentation/readme/osce_7.3_win_en_securitypatch_1053_readme.txt
http://www.trendmicro.com/ftp/documentation/readme/osce_70_win_en_securitypatch_1257_readme.txt
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2006-5211 is considered a moderate severity vulnerability that allows remote attackers to remove OfficeScan clients.
To fix CVE-2006-5211, you should update Trend Micro OfficeScan to version 6.0.0.1385 or later for CSM Suite and to version 6.5.0.1418, 7.0.0.1257, or 7.3.0.1053 for OSCE.
CVE-2006-5211 affects Trend Micro OfficeScan Corporate Edition versions 6.5, 7.0, and 7.3 before specific patch levels.
CVE-2006-5211 is associated with a remote attack that exploits an HTTP request to manipulate OfficeScan clients.
While details about specific exploits may vary, the vulnerability can be exploited remotely, indicating potential public exploit development.