Secunia - Advisories - PC-cillin Internet Security Insecure Default Directory Permissions

ウイルスバスターが入ったアプリケーションディレクトリの権限が
Everyoneにフルコントロールがかかっている。との事。
最新が、vb26f1410_1023なので、日本語版でも影響ありそうですね。

The problem is that insecure default permissions are set on the application directory (grants "Everyone" group "Full Control" on the "Internet Security 14" directory or grants "Users" group "Full Control" on the "Internet Security 2006" directory depending on the installed version). This can be exploited to remove, manipulate, and replace any of the application's files.

The security issue has been confirmed in versions 14.00.1485 and 2006 (14.10.0.1023). Other versions may also be affected.

• Trend Micro Multiple Products Local Insecure Permissions Vulnerability(Security Forcus)

Trend Micro InterScan Messaging Security Suite (IMSS) version 5.5 build 1183 is also affected.

• SECUMIND RESEARCH: vulnerability (privilege escalation) in Trend Micro Officescan/PCCillin and IMSS

PoCがありますけど、FDで立ち上げてファイルを置き換えて・・・って結構大変みたい。

• BugTraq iDefense Security Advisory 12.14.05: Trend Micro PC-Cillin Internet Security Insecure File Permission Vulnerability

DELLに入っているのはウイルスバスター12らしいです。

This tool can be used for both PC-cillin12 and PC-cillin14 as a same
program."

---