Vulnerabilities > CVE-2002-0440 - Unspecified vulnerability in Trend Micro Interscan Viruswall 3.51/3.6

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
trend-micro
exploit available
NVD
Published: 2002-07-26
Updated: 2008-09-10

Summary

Trend Micro InterScan VirusWall HTTP proxy 3.6 with the "Skip scanning if Content-length equals 0" option enabled allows malicious web servers to bypass content scanning via a Content-length header set to 0, which is often ignored by HTTP clients.

Vulnerable Configurations

Part Description Count
Application
Trend_Micro
2

Exploit-Db

descriptionTrend Micro InterScan VirusWall 3.5/3.6 Content-Length Scan Bypass Vulnerability. CVE-2002-0440 . Remote exploits for multiple platform
idEDB-ID:21339
last seen2016-02-02
modified2002-03-11
published2002-03-11
reporterJochen Thomas Bauer
sourcehttps://www.exploit-db.com/download/21339/
titleTrend Micro InterScan VirusWall 3.5/3.6 Content-Length Scan Bypass Vulnerability

References