CVE-2002-0440

CVE-2002-0440 describes a bypass vulnerability in Trend Micro InterScan VirusWall HTTP proxy versions 3.5 and 3.6. When the "Skip scanning if Content-length equals 0" option is enabled, malicious web servers can evade content scanning by setting the Content-length header to zero, a value often ignored by HTTP clients. This vulnerability carries a CVSS score of 7.5, indicating a high severity due to its network-based attack vector, low attack complexity, and potential for partial compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, exploit code is publicly available via ExploitDB, and the vulnerability has garnered significant community discussion, suggesting awareness and potential for exploitation.