high7.5Public exploit code
CVE-2003-1343
Trend Micro ScanMail for Exchange (SMEX) before 3.81 and before 6.1 might install a back door account in smg_Smxcfg30.exe, which allows remote attackers to gai…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Trend Micro ScanMail For Exchange 3.8 - Authentication Bypass2003-01-15 · remote · windows · Verified
Impact
Trend Micro ScanMail for Exchange (SMEX) before 3.81 and before 6.1 might install a back door account in smg_Smxcfg30.exe, which allows remote attackers to gain access to the web management interface via the vcc parameter, possibly "3560121183d3".
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Trend Micro | Scanmail | through 3.8 through 6.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0021.html
- http://kb.trendmicro.com/solutions/solutionDetail.asp?solutionId=13352
- http://secunia.com/advisories/7881
- http://www.securityfocus.com/bid/6619
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11061
- http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0021.html
- http://kb.trendmicro.com/solutions/solutionDetail.asp?solutionId=13352
- http://secunia.com/advisories/7881
- http://www.securityfocus.com/bid/6619
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11061