The remote host is either running Worry-Free Business Security or Trend Micro OfficeScan/Trend Micro OfficeScan client. The installed version is affected by multiple vulnerabilities :

  - If Trend Micro OfficeScan client 'Tmlisten.exe' is     configured to receive updates from other clients, it     may be possible to launch a directory traversal attack     against the remote host, and read arbitrary files.

  - A vulnerability in Trend Micro OfficeScan server CGI     modules could be exploited to trigger a buffer overflow     issue and execute arbitrary code on the remote system     with web server privileges.

  - A NULL pointer dereference issue could be exploited to     trigger a denial of service condition on the remote     system.

遠端主機上執行的 Trend Micro OfficeScan 用戶端版本受到一個目錄遊走問題影響，未經驗證的遠端攻擊者可利用此問題讀取遠端主機上的任意檔案。 

請注意，要成功利用此弱點，攻擊者需要將「Tmlisten.exe」設定為從其他用戶端接收更新。

The version of Trend Micro OfficeScan client running on the remote host is affected by a directory traversal issue that can be leveraged by an unauthenticated, remote attacker to read arbitrary files on the remote host. 

Note that successful exploitation requires that 'Tmlisten.exe' be configured to receive updates from other clients.

远程主机上运行的 Trend Micro OfficeScan 客户端版本受到一个目录遍历问题的影响，未经身份验证的远程攻击者可利用此问题读取远程主机上的任意文件。 

请注意，成功利用该问题需要配置“Tmlisten.exe”方可从其他客户端接收更新。

リモートホストで実行されているバージョンのTrend Micro OfficeScanクライアントは、ディレクトリトラバーサルの問題の影響を受け、認証されていないリモート攻撃者がこれを利用して、リモートホストで任意のファイルを読み取る可能性があります。 

なお、悪用に成功するには、他のクライアントから更新を受信するように「Tmlisten.exe」が構成されている必要があります。

 The version of Trend Micro OfficeScan client running on the remote host is affected by a directory traversal issue, which can be leveraged by an unauthenticated remote attacker to read arbitrary files on the remote host.  Note that successful exploitation requires that 'Tmlisten.exe' be configured to receive updates from other clients.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
34363	Trend Micro OfficeScan Multiple CGI Module Vulnerabilities	Nessus	Windows	2008/10/8	2018/11/15	high
34362	Trend Micro OfficeScan 用戶端遊走任意檔案存取	Nessus	Web Servers	2008/10/8	2022/4/11	medium
34362	Trend Micro OfficeScan Client Traversal Arbitrary File Access	Nessus	Web Servers	2008/10/8	2022/4/11	medium
34362	Trend Micro OfficeScan Client 遍历任意文件访问	Nessus	Web Servers	2008/10/8	2022/4/11	medium
34362	Trend Micro OfficeScan Clientのトラバーサルの任意ファイルアクセス	Nessus	Web Servers	2008/10/8	2022/4/11	medium
4705	Trend Micro OfficeScan < 7.3 Build 3172 Client Traversal Arbitrary File Access	Nessus Network Monitor	Generic	2008/10/8	2019/3/6	medium

检测

插件搜索

high

medium

medium

medium

medium

medium