Vulnerabilities > CVE-1999-1529 - Buffer Overflow vulnerability in Trend Micro Interscan Viruswall 3.23/3.3

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
trend-micro
nessus
exploit available

Summary

A buffer overflow exists in the HELO command in Trend Micro Interscan VirusWall SMTP gateway 3.23/3.3 for NT, which may allow an attacker to execute arbitrary code.

Vulnerable Configurations

Part Description Count
Application
Trend_Micro
2

Exploit-Db

  • descriptionTrend Micro InterScan VirusWall 3.2.3/3.3 Long HELO Buffer Overflow Vulnerability (2). CVE-1999-1529 ,CVE-2001-0679. Remote exploit for windows platform
    idEDB-ID:19614
    last seen2016-02-02
    modified1999-11-07
    published1999-11-07
    reporterdark spyrit
    sourcehttps://www.exploit-db.com/download/19614/
    titleTrend Micro InterScan VirusWall 3.2.3/3.3 Long HELO Buffer Overflow Vulnerability 2
  • descriptionTrend Micro InterScan VirusWall 3.2.3/3.3 Long HELO Buffer Overflow Vulnerability (1). CVE-1999-1529 ,CVE-2001-0679. Remote exploit for windows platform
    idEDB-ID:19612
    last seen2016-02-02
    modified1999-11-07
    published1999-11-07
    reporterAlain Thivillon & Stephane Aubert
    sourcehttps://www.exploit-db.com/download/19612/
    titleTrend Micro InterScan VirusWall 3.2.3/3.3 Long HELO Buffer Overflow Vulnerability 1

Nessus

NASL familySMTP problems
NASL idINTERSCAN_DOS.NASL
descriptionIt was possible to perform a denial of service against the remote Interscan SMTP server by sending it a special long HELO command. This problem allows an attacker to prevent your Interscan SMTP server from handling requests.
last seen2020-06-01
modified2020-06-02
plugin id10353
published2000-04-17
reporterThis script is Copyright (C) 2000-2018 Renaud Deraison and Alain Thivillon
sourcehttps://www.tenable.com/plugins/nessus/10353
titleTrend Micro InterScan 3.32 SMTP HELO Command Remote Overflow DoS