ID CVE-2006-5211
Summary Trend Micro OfficeScan 6.0 in Client/Server/Messaging (CSM) Suite for SMB 2.0 before 6.0.0.1385, and OfficeScan Corporate Edition (OSCE) 6.5 before 6.5.0.1418, 7.0 before 7.0.0.1257, and 7.3 before 7.3.0.1053 allow remote attackers to remove OfficeScan clients via a certain HTTP request that invokes the OfficeScan CGI program. A security patch for each affected product has been released by the vendor.
References
Vulnerable Configurations
  • cpe:2.3:a:trend_micro:officescan_corporate_edition:6.5:*:*:*:*:*:*:*
    cpe:2.3:a:trend_micro:officescan_corporate_edition:6.5:*:*:*:*:*:*:*
  • cpe:2.3:a:trend_micro:officescan_corporate_edition:7.0:*:*:*:*:*:*:*
    cpe:2.3:a:trend_micro:officescan_corporate_edition:7.0:*:*:*:*:*:*:*
  • cpe:2.3:a:trend_micro:officescan_corporate_edition:7.3:*:*:*:*:*:*:*
    cpe:2.3:a:trend_micro:officescan_corporate_edition:7.3:*:*:*:*:*:*:*
CVSS
Base: 6.4 (as of 08-03-2011 - 02:42)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:P/A:P
refmap via4
bid 20330
confirm
secunia 22156
vupen ADV-2006-3882
Last major update 08-03-2011 - 02:42
Published 10-10-2006 - 04:06
Last modified 08-03-2011 - 02:42
Back to Top