Trend troubled by further flaw
Second vulnerability unveiled this month only affects server products.
Less than two weeks after details of a UPX vulnerability affecting many of Trend Micro's products were released, along with fixes for the flaw, another problem and potential security hole has been discovered in the security company's products.

This time only server-based products, Trend's ServerProtect range, are affected, and it is thought only local users can take advantage of possible buffer overflows to run code with system privileges. Patches have been released to fix the flaw on English-language, Windows versions of the software, with other languages due soon, while two other platforms supported by the products and at risk from the vulnerability will not be patched until late next month.
Trend's announcement of the problem is here, while more technical detail is available from TippingPoint, here and here. A Secunia advisory is here.
22 February 2007
Tags:
del.icio.us
digg this
September issue of VB published
The September issue of Virus Bulletin is now available for subscribers to download.
08 September 2010
ARF published as IETF standard
Abuse report format helps auto-handling of email complaints
02 September 2010
Microsoft releases new fix for DLL vulnerability
Earlier workaround believed to be too complex for most users.
01 September 2010
Malicious tweets link to fake TweetDeck update
Twitter resets passwords for accounts that appear to have been hacked.
01 September 2010
94% of Internet users befriend unknown 'good-looking woman'
Sensitiva data shared after two-hour chat. (1 comment)
31 August 2010

Quick Links
![]() |
Poll
When do you install software updates?Leave a comment
View 12 comments

13 hours ago
1 day ago
VB100 certification
With another epic haul of 54 products to test this month, the VB test team could
have done without the bad behaviour of a number of products: terrible product
design, lack of accountability for activities, blatant false alarms in major
software, numerous problems detecting the WildList set, and some horrendous
instability under pressure. Happily, there were also some good performances to
balance things out. John Hawes has the details.
See full results.
Virus Bulletin currently has 208,729 registered users.



