CVE Feed

    Dashboard / CVE / CVE-2002-0440

    CVE-2002-0440

    Trend Micro InterScan VirusWall HTTP proxy 3.6 with the "Skip scanning if Content-length equals 0" option enabled allows malicious web servers to bypass content scanning via a Content-length header set to 0, which is often ignored by HTTP clients.

    Published:Jun 11, 2002
    Last Modified:Apr 16, 2026
    EPS:Jun 11, 2002
    EPSS Score:0.02482
    CVSS Score:7.5

    Affected Products

    Vendor
    Trend Micro
    Product
    Interscan Viruswall

    Exploits

    https://www.exploit-db.com/exploits/21339

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2007-0851 (CVSS 9.3) — Buffer overflow in the Trend Micro Scan Engine 8.000 and 8.300 before virus pattern file 4.245.00, as used in …
    CVE-2005-0533 (CVSS 7.5) — Heap-based buffer overflow in Trend Micro AntiVirus Library VSAPI before 7.510, as used in multiple Trend Micr…
    CVE-2002-2395 (CVSS 5) — InterScan VirusWall 3.52 for Windows allows remote attackers to bypass virus protection and possibly execute a…
    CVE-2002-2394 (CVSS 5) — InterScan VirusWall 3.6 for Linux and 3.52 for Windows allows remote attackers to bypass virus protection and …
    CVE-2002-1121 (CVSS 7.5) — SMTP content filter engines, including (1) GFI MailSecurity for Exchange/SMTP before 7.2, (2) InterScan VirusW…
    CVE-2002-0637 (CVSS 7.5) — InterScan VirusWall 3.52 build 1462 allows remote attackers to bypass virus protection via e-mail messages wit…
    CVE-2001-1573 (CVSS 10) — Buffer overflow in smtpscan.dll for Trend Micro InterScan VirusWall 3.51 for Windows NT has allows remote atta…
    CVE-2001-1574 (CVSS 10) — Buffer overflow in (1) HttpSaveCVP.dll and (2) HttpSaveCSP.dll in Trend Micro InterScan VirusWall 3.5.1 allows…
    CVE-2001-0791 (CVSS 5) — Trend Micro InterScan VirusWall for Windows NT allows remote attackers to make configuration changes by direct…
    CVE-2001-0958 (CVSS 7.5) — Buffer overflows in eManager plugin for Trend Micro InterScan VirusWall for NT 3.51 and 3.51J allow remote att…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High