[prev in list] [next in list] [prev in thread] [next in thread] 

List:       intrusions
Subject:    Talk Back to the article "Port 12345: Hacker haven or Net X-File?
From:       "Danny Chang (PMM-TW)" <Danny_Chang () trend ! com ! tw>
Date:       2002-01-30 2:38:03
[Download RAW message or body]

Dear sir/madam,

Hi, my name is Danny Chang, the global product manager of OfficeScan. I
represent my company to respond to the said article and hope that you can
circulate or post our response to the audience, thanks very much in advance.

We recently saw the article entitled "Port 12345" Hacker Haven or Net
X-File?" posted online at ZDNet Australia on January 22, 2002 in which a
recent increase in port scanning acitivity of TCP port 12345 was said to
have been associated with people targeting Trend Micro OfficeScan antivirus
software which happens to utilize the same port number on the Internet.  
 
There are claims made by Edward Luck of Fulcrum Consulting Group regarding
certain vulnerabilities in the OfficeScan product.  We would like to take
this opportunity to point out that any causal relationship between Trend
Micro's software and port scanning for malicious intent by individuals is
purely speculative.  
 
As mentioned in the article, Trend Micro has been aware of this issue for a
while and has taken appropriate actions to minimize any affects to our
customers, and validated through technical studies over the last several
months that there is no specific threat to our customers. Trend Micro's
customers should not experience negative effects from port 12345 scanning.
Trend Micro has released a patch to OfficeScan v3.5x customers to select
alternative ports ; this option is built into the next version of
OfficeScan, scheduled for release in early 2002. Please also be informed
that Trend Micro has operated a 'honeypot' machine to monitor any suspicious
activity on port 12345 for the past several months, as suggested by Mr.
Luck, and there has been little to no activity on this port.   
 
Trend Micro continues in its commitment to provide world-class antivirus
solutions.   Any issues raised from OfficeScan users should be forwarded to
Trend Micro directly.   
 
Trend Micro Inc. 


Danny Chang
Product Manager of OfficeScan and ServerProtect
Trend Micro Inc.

[prev in list] [next in list] [prev in thread] [next in thread]