Trend troubled by further flaw

Second vulnerability unveiled this month only affects server products.

Less than two weeks after details of a UPX vulnerability affecting many of Trend Micro's products were released, along with fixes for the flaw, another problem and potential security hole has been discovered in the security company's products.

Advertise on www.virusbtn.com

This time only server-based products, Trend's ServerProtect range, are affected, and it is thought only local users can take advantage of possible buffer overflows to run code with system privileges. Patches have been released to fix the flaw on English-language, Windows versions of the software, with other languages due soon, while two other platforms supported by the products and at risk from the vulnerability will not be patched until late next month.

Trend's announcement of the problem is here, while more technical detail is available from TippingPoint, here and here. A Secunia advisory is here.

22 February 2007

Tags:    del.icio.us  digg this! digg this

Quick Links



Poll

When do you install software updates?
As soon as they are released
As soon as I have some time
I take my time, but I always install them eventually
Only when I feel it is absolutely necessary
Never
Leave a comment
View 12 comments

Jobs Career Sidebar

Twitter Feed

virusbtn: More about ARF (see http://bit.ly/9PuKiO) at ReturnPath http://bit.ly/9podhx
13 hours ago


virusbtn: September VB issue: LNK files, anti-unpacker, sender authentication, VBSpam review and more http://bit.ly/987AOC
1 day ago


VB100 certification

VB100 With another epic haul of 54 products to test this month, the VB test team could have done without the bad behaviour of a number of products: terrible product design, lack of accountability for activities, blatant false alarms in major software, numerous problems detecting the WildList set, and some horrendous instability under pressure. Happily, there were also some good performances to balance things out. John Hawes has the details.
See full results.

Virus Bulletin currently has 208,729 registered users.