PT-2003-2288 · Trend Micro · Scanmail For Exchange

Publicado 2003-12-31 · Atualizado 2017-07-29 · CVE-2003-1343

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Trend Micro ScanMail for Exchange (SMEX) versions prior to 3.81 Trend Micro ScanMail for Exchange (SMEX) versions prior to 6.1

Description The issue allows remote attackers to gain access to the web management interface. This is possibly achieved via the vcc parameter.

Recommendations For versions prior to 3.81, update to version 3.81 or later. For versions prior to 6.1, update to version 6.1 or later. As a temporary workaround, consider restricting access to the web management interface until a patch is available. Avoid using the vcc parameter in the affected interface until the issue is resolved.

Exploit

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2003-1343

Produtos afetados

Scanmail For Exchange

Referências · 8

• 🔥 https://exploit-db.com/exploits/22174 · Exploit
• 🔥 http://securityfocus.com/bid/6619 · Exploit
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1343 · Nota
• http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0021.html · Nota
• http://kb.trendmicro.com/solutions/solutionDetail.asp?solutionId=13352 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11061 · Nota
• http://secunia.com/advisories/7881 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2003-1343 · Nota de Segurança