CVE-2004-2006

MEDIO 4.6CVE-2004-2006 · Published 07/05/2004 · updated 16/06/2026

En resumen

CVE-2004-2006 es una vulnerabilidad MEDIO (CVSS 4.6) que afecta a officescan (trend micro).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.50%, mayor que el 43.0% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
officescan trend_micro	`= 3.0= corporate_3.11= corporate_3.13= corporate_3.5= corporate_3.54= corporate_5.02= corporate_5.58`	No fix yet

Description

Trend Micro OfficeScan 3.0 - 6.0 has default permissions of "Everyone Full Control" on the installation directory and registry keys, which allows local users to disable virus protection.

References

marc.info
secunia.com/advisories/11576 · Exploit
osvdb.org/5990
securityfocus.com/bid/10300 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/16092

Más vulnerabilidades de officescan

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

officescan

trend_micro

= 3.0= corporate_3.11= corporate_3.13= corporate_3.5= corporate_3.54= corporate_5.02= corporate_5.58

No fix yet

Más vulnerabilidades de officescan

Ver todo →