Directory traversal vulnerability in the UpdateAgent function in TmListen.exe in the OfficeScanNT Listener service in the client in Trend Micro OfficeScan 7.3 Patch 4 build 1367 and other builds before 1372, OfficeScan 8.0 SP1 before build 1222, OfficeScan 8.0 SP1 Patch 1 before build 3087, and Worry-Free Business Security 5.0 before build 1220 allows remote attackers to read arbitrary files via directory traversal sequences in an HTTP request. NOTE: some of these details are obtained from third party information.

 The version of Trend Micro OfficeScan client running on the remote host is affected by a directory traversal issue, which can be leveraged by an unauthenticated remote attacker to read arbitrary files on the remote host.  Note that successful exploitation requires that 'Tmlisten.exe' be configured to receive updates from other clients.

The remote host is either running Worry-Free Business Security or Trend Micro OfficeScan/Trend Micro OfficeScan client. The installed version is affected by multiple vulnerabilities :

  - If Trend Micro OfficeScan client 'Tmlisten.exe' is     configured to receive updates from other clients, it     may be possible to launch a directory traversal attack     against the remote host, and read arbitrary files.

  - A vulnerability in Trend Micro OfficeScan server CGI     modules could be exploited to trigger a buffer overflow     issue and execute arbitrary code on the remote system     with web server privileges.

  - A NULL pointer dereference issue could be exploited to     trigger a denial of service condition on the remote     system.

The version of Trend Micro OfficeScan client running on the remote host is affected by a directory traversal issue that can be leveraged by an unauthenticated, remote attacker to read arbitrary files on the remote host. 

Note that successful exploitation requires that 'Tmlisten.exe' be configured to receive updates from other clients.

ID	Name	Product	Family	Severity
4705	Trend Micro OfficeScan < 7.3 Build 3172 Client Traversal Arbitrary File Access	Nessus Network Monitor	Generic	medium
34363	Trend Micro OfficeScan Multiple CGI Module Vulnerabilities	Nessus	Windows	high
34362	Trend Micro OfficeScan Client Traversal Arbitrary File Access	Nessus	Web Servers	medium

Detections

Analytics

CVE-2008-2439

high

Tenable Plugins

medium

high

medium