PT-2003-2286 · Trend Micro · Trend Micro Officescan

Publicado 2003-12-31 · Atualizado 2017-07-29 · CVE-2003-1341

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Trend Micro OfficeScan versions 3.0 through 3.54 Trend Micro OfficeScan version 5.x

Description The issue allows remote attackers to bypass authentication and gain access to the web management console. This is achieved by making a direct request to "cgiMasterPwd.exe" instead of going through "cgiChkMasterPasswd.exe".

Recommendations For Trend Micro OfficeScan versions 3.0 through 3.54, consider restricting access to the web management console until a fix is available. For Trend Micro OfficeScan version 5.x, consider restricting access to the web management console until a fix is available.

Exploit

Correção

Enumeração de Fraquezas

CWE-16

Identificadores relacionados

CVE-2003-1341

Produtos afetados

Trend Micro Officescan

Referências · 9

• 🔥 https://exploit-db.com/exploits/22171 · Exploit
• 🔥 http://securityfocus.com/bid/6616 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11059 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1341 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-1341 · Nota de Segurança
• http://osvdb.org/6181 · Nota
• http://kb.trendmicro.com/solutions/solutionDetail.asp?solutionId=13353 · Nota
• http://secunia.com/advisories/7881 · Aviso do Fabricante
• http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0020.html · Nota