CVE-2006-5212
Trend Micro OfficeScan 6.0 in Client/Server/Messaging (CSM) Suite for SMB 2.0 before 6.0.0.1385, and OfficeScan Corporate Edition (OSCE) 6.5 before 6.5.0.1418, 7.0 before 7.0.0.1257, and 7.3 before 7.3.0.1053 allow remote attackers to delete files via a…
Does this matter?
Lower severity and a low EPSS score (1.55%). Track it; it rarely justifies an emergency change on its own.
Description
Trend Micro OfficeScan 6.0 in Client/Server/Messaging (CSM) Suite for SMB 2.0 before 6.0.0.1385, and OfficeScan Corporate Edition (OSCE) 6.5 before 6.5.0.1418, 7.0 before 7.0.0.1257, and 7.3 before 7.3.0.1053 allow remote attackers to delete files via a modified filename parameter in a certain HTTP request that invokes the OfficeScan CGI program.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
- EPSS
- 1.55% probability · 74th percentile
- CISA KEV
- Not listed
- Affected
- trend micro/officescan
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/22156Vendor Advisory
- http://www.securityfocus.com/bid/20330
- http://www.trendmicro.com/download/product.asp?productid=5Patch
- http://www.trendmicro.com/ftp/documentation/readme/csm_2.0_osce_6.0_win_en_securitypatch_1385_readme.txtVendor Advisory
- http://www.trendmicro.com/ftp/documentation/readme/osce_6.5_win_en_securitypatch_1418_readme.txtVendor Advisory
- http://www.trendmicro.com/ftp/documentation/readme/osce_7.3_win_en_securitypatch_1053_readme.txtVendor Advisory
- http://www.trendmicro.com/ftp/documentation/readme/osce_70_win_en_securitypatch_1257_readme.txtVendor Advisory
- http://www.vupen.com/english/advisories/2006/3882
- http://secunia.com/advisories/22156Vendor Advisory
- http://www.securityfocus.com/bid/20330
- http://www.trendmicro.com/download/product.asp?productid=5Patch
- http://www.trendmicro.com/ftp/documentation/readme/csm_2.0_osce_6.0_win_en_securitypatch_1385_readme.txtVendor Advisory
- http://www.trendmicro.com/ftp/documentation/readme/osce_6.5_win_en_securitypatch_1418_readme.txtVendor Advisory
- http://www.trendmicro.com/ftp/documentation/readme/osce_7.3_win_en_securitypatch_1053_readme.txtVendor Advisory
- http://www.trendmicro.com/ftp/documentation/readme/osce_70_win_en_securitypatch_1257_readme.txtVendor Advisory
- http://www.vupen.com/english/advisories/2006/3882
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.