high7.5Public exploit code
CVE-2003-1341
The default installation of Trend Micro OfficeScan 3.0 through 3.54 and 5.x allows remote attackers to bypass authentication from cgiChkMasterPasswd.exe and ga…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Trend Micro OfficeScan 3.x - CGI Directory Insufficient Permissions2003-01-15 · remote · windows · Verified
Impact
The default installation of Trend Micro OfficeScan 3.0 through 3.54 and 5.x allows remote attackers to bypass authentication from cgiChkMasterPasswd.exe and gain access to the web management console via a direct request to cgiMasterPwd.exe.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Trend Micro | Officescan | Versions 3.0, 3.1.1, 3.5, 3.11, 3.13, 3.54 |
| Trend Micro | Virus Buster | Versions 3.52, 3.53, 3.54 |
Weakness classification
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0020.html
- http://kb.trendmicro.com/solutions/solutionDetail.asp?solutionId=13353
- http://secunia.com/advisories/7881
- http://www.osvdb.org/6181
- http://www.securityfocus.com/bid/6616
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11059
- http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0020.html
- http://kb.trendmicro.com/solutions/solutionDetail.asp?solutionId=13353
- http://secunia.com/advisories/7881
- http://www.osvdb.org/6181
- http://www.securityfocus.com/bid/6616
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11059