vulnerability: Trend Micro Deep Discovery 3.8 privilege escalation [CVE-2015-2873] : 8/19/2015 10:58:17 AM

Group Chat & IM for Teams

Communicate with co-workers in real time. Used by Netflix, Dropbox & Salesforce. $0/unlimited users. Get started >>

From our sponsors

Vulnerability Advisories

Vulnerabilities of scip VulDB

Trend Micro Deep Discovery 3.8 privilege escalation [CVE-2015-2873]
8/17/2015 7:00:00 PM

General

scipID: 77326
Affected: Trend Micro Deep Discovery 3.8
Published: 08/18/2015
Risk: critical

Created: 08/19/2015
Entry: 69.4% complete

Summary

A vulnerability was found in Trend Micro Deep Discovery 3.8. It has been declared as critical. This vulnerability affects an unknown function. The manipulation with an unknown input leads to a privilege escalation vulnerability. As an impact it is known to affect confidentiality, and integrity.

The weakness was released 08/18/2015 as confirmed advisory (CERT.org). The advisory is shared for download at kb.cert.org. This vulnerability was named CVE-2015-2873 since 04/03/2015. The exploitation appears to be easy. The attack can be initiated remotely. The technical details are unknown and an exploit is not available.

The vulnerability is also documented in the vulnerability database at X-Force (105699). The entries 77325 are pretty similar.

CVSS

Base Score: 5.5 (CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:N) [?]
Temp Score: 4.1 (CVSS2#E:U/RL:OF/RC:C) [?]

CPE

cpe:/a:trend_micro:deep_discovery:3.8

Exploiting

Class: Privilege escalation
Local: No
Remote: Yes

Availability: No
Status: Unproven

Countermeasures

Recommended: no mitigation known
Status: Official fix
0-Day Time: 0 days since found

Timeline

04/03/2015 | CVE assigned
08/18/2015 | Advisory disclosed
08/19/2015 | VulDB entry created
08/19/2015 | VulDB entry updated

Sources

Advisory: kb.cert.org
Status: Confirmed
Confirmation: esupport.trendmicro.com

CVE: CVE-2015-2873 (mitre.org) (nvd.nist.org) (cvedetails.com)

X-Force: 105699 – Trend Micro Deep Discovery security bypass