PT-2003-2286 · Trend Micro · Trend Micro Officescan

Published 2003-12-31 · Updated 2017-07-29 · CVE-2003-1341

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Trend Micro OfficeScan versions 3.0 through 3.54 Trend Micro OfficeScan version 5.x

Description The issue allows remote attackers to bypass authentication and gain access to the web management console. This is achieved by making a direct request to "cgiMasterPwd.exe" instead of going through "cgiChkMasterPasswd.exe".

Recommendations For Trend Micro OfficeScan versions 3.0 through 3.54, consider restricting access to the web management console until a fix is available. For Trend Micro OfficeScan version 5.x, consider restricting access to the web management console until a fix is available.

Exploit

Fix

Weakness Enumeration

CWE-16

Related Identifiers

CVE-2003-1341

Affected Products

Trend Micro Officescan

References · 9

• 🔥 https://exploit-db.com/exploits/22171 · Exploit
• 🔥 http://securityfocus.com/bid/6616 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-1341 · Security Note
• http://secunia.com/advisories/7881 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11059 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1341 · Note
• http://osvdb.org/6181 · Note
• http://kb.trendmicro.com/solutions/solutionDetail.asp?solutionId=13353 · Note
• http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0020.html · Note