PT-2003-2288 · Trend Micro · Scanmail For Exchange

Published 2003-12-31 · Updated 2017-07-29 · CVE-2003-1343

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Trend Micro ScanMail for Exchange (SMEX) versions prior to 3.81 Trend Micro ScanMail for Exchange (SMEX) versions prior to 6.1

Description The issue allows remote attackers to gain access to the web management interface. This is possibly achieved via the vcc parameter.

Recommendations For versions prior to 3.81, update to version 3.81 or later. For versions prior to 6.1, update to version 6.1 or later. As a temporary workaround, consider restricting access to the web management interface until a patch is available. Avoid using the vcc parameter in the affected interface until the issue is resolved.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2003-1343

Affected Products

Scanmail For Exchange

References · 8

• 🔥 https://exploit-db.com/exploits/22174 · Exploit
• 🔥 http://securityfocus.com/bid/6619 · Exploit
• http://secunia.com/advisories/7881 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2003-1343 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1343 · Note
• http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0021.html · Note
• http://kb.trendmicro.com/solutions/solutionDetail.asp?solutionId=13352 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11061 · Note