CVE-2017-11391 | BDVDB-2026-88422 Detail

Trend MicroTrend Micro InterScan Messaging Security Virtual Appliance

Description#

Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the "t" parameter within modTMCSS Proxy. Formerly ZDI-CAN-4744.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/100075
https://success.trendmicro.com/solution/1117723
http://www.zerodayinitiative.com/advisories/ZDI-17-502

Exploit#

No public exploit known

History#

Version 12017-08-03Record published in the CVE List.
Version 22024-09-17Most recent update recorded in the CVE List.