CVE-2006-5211

Description

Trend Micro OfficeScan 6.0 in Client/Server/Messaging (CSM) Suite for SMB 2.0 before 6.0.0.1385, and OfficeScan Corporate Edition (OSCE) 6.5 before 6.5.0.1418, 7.0 before 7.0.0.1257, and 7.3 before 7.3.0.1053 allow remote attackers to remove OfficeScan clients via a certain HTTP request that invokes the OfficeScan CGI program.

Affected products

• Trend Micro / officescan_corporate_edition6.5 – 6.5
• Trend Micro / officescan_corporate_edition7.0 – 7.0
• Trend Micro / officescan_corporate_edition7.3 – 7.3

References

• MISChttp://www.securityfocus.com/bid/20330
• MISChttp://www.trendmicro.com/ftp/documentation/readme/osce_70_win_en_securitypatch_1257_readme.txt
• MISChttp://www.trendmicro.com/ftp/documentation/readme/osce_7.3_win_en_securitypatch_1053_readme.txt
• MISChttp://www.trendmicro.com/ftp/documentation/readme/csm_2.0_osce_6.0_win_en_securitypatch_1385_readme.txt
• VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2006/3882
• VENDOR_ADVISORYhttp://secunia.com/advisories/22156
• MISChttp://www.trendmicro.com/download/product.asp?productid=5
• MISChttp://www.trendmicro.com/ftp/documentation/readme/osce_6.5_win_en_securitypatch_1418_readme.txt