CVE-2006-5212
First published: Mon Oct 09 2006(Updated: )
Trend Micro OfficeScan 6.0 in Client/Server/Messaging (CSM) Suite for SMB 2.0 before 6.0.0.1385, and OfficeScan Corporate Edition (OSCE) 6.5 before 6.5.0.1418, 7.0 before 7.0.0.1257, and 7.3 before 7.3.0.1053 allow remote attackers to delete files via a modified filename parameter in a certain HTTP request that invokes the OfficeScan CGI program.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Trend Micro OfficeScan XG | =6.0 | |
| Trend Micro OfficeScan XG | =corporate_6.5 | |
| Trend Micro OfficeScan XG | =corporate_7.0 | |
| Trend Micro OfficeScan XG | =corporate_7.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.trendmicro.com/download/product.asp?productid=5
- http://www.trendmicro.com/ftp/documentation/readme/csm_2.0_osce_6.0_win_en_securitypatch_1385_readme.txt
- http://www.trendmicro.com/ftp/documentation/readme/osce_6.5_win_en_securitypatch_1418_readme.txt
- http://www.trendmicro.com/ftp/documentation/readme/osce_7.3_win_en_securitypatch_1053_readme.txt
- http://www.trendmicro.com/ftp/documentation/readme/osce_70_win_en_securitypatch_1257_readme.txt
- http://www.securityfocus.com/bid/20330
- http://secunia.com/advisories/22156
- http://www.vupen.com/english/advisories/2006/3882
Frequently Asked Questions
What is the severity of CVE-2006-5212?
CVE-2006-5212 has a medium severity level, allowing remote attackers to delete files.
How do I fix CVE-2006-5212?
To fix CVE-2006-5212, update Trend Micro OfficeScan to the latest version specified in the vendor's security patches.
Which versions are affected by CVE-2006-5212?
CVE-2006-5212 affects Trend Micro OfficeScan 6.0, Corporate Edition 6.5, 7.0, and 7.3 before specific patch levels.
What type of attack does CVE-2006-5212 facilitate?
CVE-2006-5212 facilitates remote file deletion attacks via a modified filename parameter in an HTTP request.
Is my system vulnerable to CVE-2006-5212?
If you are using an affected version of Trend Micro OfficeScan without the necessary updates, your system is vulnerable to CVE-2006-5212.
- agent/references
- agent/softwarecombine
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/remedy
- agent/weakness
- agent/author
- agent/severity
- agent/description
- agent/event
- agent/first-publish-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/trend micro
- product/officescan
- canonical/trend micro officescan
- canonical/trend micro officescan xg
- version/trend micro officescan xg/6.0
- version/trend micro officescan xg/corporate_6.5
- version/trend micro officescan xg/corporate_7.0
- version/trend micro officescan xg/corporate_7.3