TrendMicro Node.js HTTP server listening on localhost can execute commands

Re:TrendMicro Node.js HTTP server listening on localhost can... by JoblessWonder on Monday January 11, 2016 @05:10PM (#10883991)

Pretty sure this only works on the personal version of their software. We don't even have an option to deploy a password manager (that I'm aware of) as part of the enterprise Anti-virus product.

[ Parent | on HN ]

Re:TrendMicro Node.js HTTP server listening on localhost can... by fpgaminer on Monday January 11, 2016 @05:23PM (#10884053)

Regardless, given what was discovered in the personal version, would you trust the enterprise version?

[ Parent | on HN ]

Re:TrendMicro Node.js HTTP server listening on localhost can... by JoblessWonder on Monday January 11, 2016 @05:55PM (#10884250)

The personal versions are what get saddled with "Value Add-Ons" like password managers/website screening with colorful icons/blah blah bullshit bullshit. Most enterprise anti-virus software concentrates on finding viruses and maintaining compliance with whatever policies you have. They are also usually managed by different divisions with different goals.

(Whether or not anti-virus at all is effective is another debate entirely.)

[ Parent | on HN ]

Re:TrendMicro Node.js HTTP server listening on localhost can... by digi_owl on Tuesday January 12, 2016 @05:34AM (#10886568)

I really do wonder how the market got segmented like this...

[ Parent | on HN ]

Re:TrendMicro Node.js HTTP server listening on localhost can... by jay-saint on Monday January 11, 2016 @05:22PM (#10884046)

Confirmed, this does not work for `Trend Micro Worry Free Business Security` clients. I do know that the enterprise / business version installs a server on the management machine. I do not currently have access to the box that our version is hosted on to test the exploit there.

[ Parent | on HN ]