CVE-2006-5212: Medium severity trend micro officescan vulnerability

Published Oct 10, 2006

Updated

Trend Micro OfficeScan 6.0 in Client/Server/Messaging (CSM) Suite for SMB 2.0 before 6.0.0.1385, and OfficeScan Corporate Edition (OSCE) 6.5 before 6.5.0.1418, 7.0 before 7.0.0.1257, and 7.3 before 7.3.0.1053 allow remote attackers to delete files via a modified filename parameter in a certain HTTP request that invokes the OfficeScan CGI program.

Affected Software

4 affected components

Trend Micro OfficeScan=6.0

Trend Micro OfficeScan=corporate_6.5

Trend Micro OfficeScan=corporate_7.0

Trend Micro OfficeScan=corporate_7.3

Remediation

Patch Available

http://www.trendmicro.com/download/product.asp?productid=5

Event History

Oct 10, 2006

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Data Sourced

via NVD·04:06 AM

RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2006-5212?

CVE-2006-5212 has a medium severity level, allowing remote attackers to delete files.

How do I fix CVE-2006-5212?

To fix CVE-2006-5212, update Trend Micro OfficeScan to the latest version specified in the vendor's security patches.

Which versions are affected by CVE-2006-5212?

CVE-2006-5212 affects Trend Micro OfficeScan 6.0, Corporate Edition 6.5, 7.0, and 7.3 before specific patch levels.

What type of attack does CVE-2006-5212 facilitate?

CVE-2006-5212 facilitates remote file deletion attacks via a modified filename parameter in an HTTP request.

Is my system vulnerable to CVE-2006-5212?

If you are using an affected version of Trend Micro OfficeScan without the necessary updates, your system is vulnerable to CVE-2006-5212.