CVE-2006-0642
mediumpriority · track · 21EPSS 0.019 · 80 %ileEUUSEPSS · scored 2026-10-28
Trend Micro ServerProtect 5.58, and possibly InterScan Messaging Security Suite and InterScan Web Security Suite, have a default configuration setting of "Do not scan compressed files when Extracted file count exceeds 500 files," which may be too low in certain circumstances, which allows remote attackers to bypass anti-virus checks by sending compressed archives containing many small files. NOTE: since this is related to a configuration setting that has an operational impact that might vary depending on the environment, and the product is claimed to report a message when the compressed file exceeds specified limits, perhaps this should not be included in CVE.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (4)
Products and version ranges known to be affected.
- trend micro interscan messaging security suiteall versionsnvdUScpe:2.3:a:trend_micro:interscan_messaging_security_suite:*:*:*:*:*:*:*:*
- trend micro interscan web security suiteall versionsnvdUScpe:2.3:a:trend_micro:interscan_web_security_suite:*:*:*:*:*:*:*:*
also known as (2)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (18)
External citations — patches, advisories, analysis.
- http://www.packetstormsecurity.org/0602-advisories/Bypass.pdfenisa_euvd
- http://www.packetstormsecurity.org/filedesc/Bypass.pdf.htmlenisa_euvd
- http://www.securityfocus.com/archive/1/423896/100/0/threadedenisa_euvd
- http://www.securityfocus.com/archive/1/423913/100/0/threadedenisa_euvd
- http://www.securityfocus.com/archive/1/423914/100/0/threadedenisa_euvd
- http://www.securityfocus.com/archive/1/424172/100/0/threadedenisa_euvd
- http://www.securityfocus.com/archive/1/424598/100/0/threadedenisa_euvd
- http://www.securityfocus.com/bid/16483enisa_euvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan