CVE:CVE-2008-2433
CNNVD:CNNVD-200808-318
趋势防病毒软件是用户范围较大的分布式杀毒软件。
趋势防病毒软件的web管理控制台在用户登录时创建一个随机会话令牌来识别用户。攻击者可以相对容易地以暴力猜测的方式得到认证令牌，冒充管理员角色，后通过操控配置完全控制系统。
solution:Upgrade trend_micro client_server_messaging_suite to a higher version than 3.5,3.6,and avoid the version 3.5,3.6; Upgrade trend_micro officescan to a higher version than 7.0,7.3,8.0,and avoid the version 7.0,7.3,8.0; Upgrade trend_micro worry_free_business_security to a higher version than 5.0,and avoid the version 5.0