CVE-2008-3866: Medium severity trend micro internet security vulnerability
The Trend Micro Personal Firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007 and 2008 17.0.1224, relies on client-side password protection implemented in the configuration GUI, which allows local users to bypass intended access restrictions and change firewall settings by using a modified client to send crafted packets.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-3866?
CVE-2008-3866 is considered a moderate severity vulnerability.
How do I fix CVE-2008-3866?
To fix CVE-2008-3866, update to the latest version of Trend Micro OfficeScan or Internet Security that addresses this vulnerability.
What are the affected products of CVE-2008-3866?
CVE-2008-3866 affects Trend Micro OfficeScan 8.0 SP1 and Trend Micro Internet Security 2007 and 2008.
What kind of vulnerability is CVE-2008-3866?
CVE-2008-3866 is a client-side password protection vulnerability in the Trend Micro Personal Firewall service.
Is CVE-2008-3866 exploitable remotely?
CVE-2008-3866 is not typically considered exploitable remotely as it relies on client-side interactions.