Two vulnerabilities have been reported in Trend Micro OfficeScan, which can be exploited by malicious people to bypass certain security restrictions or compromise a vulnerable system.

1) A boundary error within CGIOCommon.dll can be exploited to cause a stack-based buffer overflow via a specially crafted HTTP request.

Successful exploitation allows execution of arbitrary code.

2) An error within cgiChkMasterPwd.exe can be exploited to bypass the authentication mechanism of the web management interface by sending a specially crafted request with an empty encryption string and hash.

The vulnerabilities affect OfficeScan Corporate Edition versions 8.0, 7.3, 7.0, 6.5, OfficeScan 6.0 in Client/Server/Messaging Suite for SMB 2, and Client Server Messaging Security versions 3.6, 3.5, and 3.0.

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
1) Discovered by an anonymous person and reported via iDefense Labs.
2) Discovered by David Maciejak and reported via iDefense Labs.

Changelog
Further details available to Secunia VIM customers

Original Advisory
Trend Micro:
http://www.trendmicro.com/ftp/documentation/readme/osce_8_win_en_securitypatch-1042_readme.txt
http://www.trendmicro.com/ftp/documentation/readme/osce_70_win_en_securitypatch_1364_readme.txt
http://www.trendmicro.com/ftp/documentation/readme/osce_73_win_en_securitypatch_1293_readme.txt
http://www.trendmicro.com/ftp/documentation/readme/osce_65_win_en_securitypatch_1458_readme.txt
http://www.trendmicro.com/ftp/documentation/readme/CSM_2.0_osce_6.0_win_en_securitypatch_1398_readme.txt
http://www.trendmicro.com/ftp/documentation/readme/csm_36_win_en_securitypatch_1149_readme.txt
http://www.trendmicro.com/ftp/documentation/readme/csm_35_win_en_securitypatch_1152_readme.txt
http://www.trendmicro.com/ftp/documentation/readme/csm_30_win_en_securitypatch_1209_readme.txt

iDefense Labs:
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=558
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=559

Deep Links
Links available to Secunia VIM customers