high7.5Public exploit code
CVE-2002-0440
Trend Micro InterScan VirusWall HTTP proxy 3.6 with the "Skip scanning if Content-length equals 0" option enabled allows malicious web servers to bypass conten…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Trend Micro Interscan VirusWall 3.5/3.6 - Content-Length Scan Bypass2002-03-11 · remote · multiple · Verified
Impact
Trend Micro InterScan VirusWall HTTP proxy 3.6 with the "Skip scanning if Content-length equals 0" option enabled allows malicious web servers to bypass content scanning via a Content-length header set to 0, which is often ignored by HTTP clients.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Trend Micro | Interscan Viruswall | Versions 3.6, 3.51 |
References
- NVD record
- CVE.org record
- http://seclists.org/lists/bugtraq/2002/Mar/0162.html
- http://www.inside-security.de/vwall_cl0.html
- http://www.iss.net/security_center/static/8425.php
- http://www.securityfocus.com/bid/4265
- http://seclists.org/lists/bugtraq/2002/Mar/0162.html
- http://www.inside-security.de/vwall_cl0.html
- http://www.iss.net/security_center/static/8425.php
- http://www.securityfocus.com/bid/4265