CVE:CVE-2008-1365
CNNVD:CNNVD-200803-254
Trend Micro OfficeScan Corporate Edition 8.0 Patch 2 build 1189 及其早期版本, 和 7.3 Patch 3 build 1314及其早期版本中的基于栈缓冲区溢出会允许远程攻击者通过一个长得加密的密码来执行任意代码或造成一个拒绝服务(崩溃)。该密码会引发(1)cgiChkMasterPwd.exe,和(2)通过 cgiABLogon.exe以及其他向量即可获得的policyserver.exe as reachable,发生溢出。
solution:Upgrade trend_micro officescan_corporate_edition to a higher version than 7.3_patch3_build1314,8.0_patch2_build1189,and avoid the version (,7.3_patch3_build1314],(,8.0_patch2_build1189]