{"id":"CVE-2006-5211","aliases":["EUVD-2006-5196","GHSA-96r8-88h5-mm79"],"status":"published","title":"Trend Micro OfficeScan 6.0 in Client/Server/Messaging (CSM) Suite for SMB 2.0 before 6.0.0.1385,...","description":"Trend Micro OfficeScan 6.0 in Client/Server/Messaging (CSM) Suite for SMB 2.0 before 6.0.0.1385, and OfficeScan Corporate Edition (OSCE) 6.5 before 6.5.0.1418, 7.0 before 7.0.0.1257, and 7.3 before 7.3.0.1053 allow remote attackers to remove OfficeScan clients via a certain HTTP request that invokes the OfficeScan CGI program.","severity":{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02744,"percentile":0.86276,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2006-10-09T21:00:00Z","modified":"2026-06-16T22:30:45Z","products":[{"vendor":"trend_micro","product":"officescan_corporate_edition"}],"references":[{"url":"http://www.securityfocus.com/bid/20330","tags":["vdb-entry","x_refsource_BID","x_transferred","Patch"]},{"url":"http://www.trendmicro.com/ftp/documentation/readme/osce_70_win_en_securitypatch_1257_readme.txt","tags":["x_refsource_CONFIRM","x_transferred","Patch"]},{"url":"http://www.trendmicro.com/ftp/documentation/readme/osce_7.3_win_en_securitypatch_1053_readme.txt","tags":["x_refsource_CONFIRM","x_transferred","Patch"]},{"url":"http://www.trendmicro.com/ftp/documentation/readme/csm_2.0_osce_6.0_win_en_securitypatch_1385_readme.txt","tags":["x_refsource_CONFIRM","x_transferred","Patch"]},{"url":"http://www.vupen.com/english/advisories/2006/3882","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://secunia.com/advisories/22156","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.trendmicro.com/download/product.asp?productid=5","tags":["x_refsource_CONFIRM","x_transferred","Patch"]},{"url":"http://www.trendmicro.com/ftp/documentation/readme/osce_6.5_win_en_securitypatch_1418_readme.txt","tags":["x_refsource_CONFIRM","x_transferred","Patch"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-5211"},{"url":"https://github.com/advisories/GHSA-96r8-88h5-mm79"}],"sources":{"cve":[{"id":"CVE-2006-5211","description":"Trend Micro OfficeScan 6.0 in Client/Server/Messaging (CSM) Suite for SMB 2.0 before 6.0.0.1385, and OfficeScan Corporate Edition (OSCE) 6.5 before 6.5.0.1418, 7.0 before 7.0.0.1257, and 7.3 before 7.3.0.1053 allow remote attackers to remove OfficeScan clients via a certain HTTP request that invokes the OfficeScan CGI program.","status":"published","published":"2006-10-09T21:00:00Z","modified":"2024-08-07T19:41:05.035Z","updated_at":"2026-11-02T14:33:48.116532Z"}],"euvd":[{"id":"EUVD-2006-5196","description":"Trend Micro OfficeScan 6.0 in Client/Server/Messaging (CSM) Suite for SMB 2.0 before 6.0.0.1385, and OfficeScan Corporate Edition (OSCE) 6.5 before 6.5.0.1418, 7.0 before 7.0.0.1257, and 7.3 before 7.3.0.1053 allow remote attackers to remove OfficeScan clients via a certain HTTP request that invokes the OfficeScan CGI program.","status":"published","published":"2006-10-09T21:00:00Z","modified":"2024-08-07T19:41:05Z","updated_at":"2026-11-03T01:15:48.962734Z"}],"ghsa":[{"id":"GHSA-96r8-88h5-mm79","title":"Trend Micro OfficeScan 6.0 in Client/Server/Messaging (CSM) Suite for SMB 2.0 before 6.0.0.1385,...","description":"Trend Micro OfficeScan 6.0 in Client/Server/Messaging (CSM) Suite for SMB 2.0 before 6.0.0.1385, and OfficeScan Corporate Edition (OSCE) 6.5 before 6.5.0.1418, 7.0 before 7.0.0.1257, and 7.3 before 7.3.0.1053 allow remote attackers to remove OfficeScan clients via a certain HTTP request that invokes the OfficeScan CGI program.","status":"published","published":"2022-05-01T07:26:06Z","modified":"2023-01-31T05:02:06Z","updated_at":"2026-11-02T14:48:11.509294Z"}],"nvd":[{"id":"CVE-2006-5211","description":"Trend Micro OfficeScan 6.0 in Client/Server/Messaging (CSM) Suite for SMB 2.0 before 6.0.0.1385, and OfficeScan Corporate Edition (OSCE) 6.5 before 6.5.0.1418, 7.0 before 7.0.0.1257, and 7.3 before 7.3.0.1053 allow remote attackers to remove OfficeScan clients via a certain HTTP request that invokes the OfficeScan CGI program.","status":"published","published":"2006-10-10T04:06:00Z","modified":"2026-06-16T22:30:45.44Z","cvss":[{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:01:06.675668Z"}]}}