7.5

CVE-2003-1341

Exploit
The default installation of Trend Micro OfficeScan 3.0 through 3.54 and 5.x allows remote attackers to bypass authentication from cgiChkMasterPasswd.exe and gain access to the web management console via a direct request to cgiMasterPwd.exe.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Trend Micro ≫ Officescan Version 3.0 Edition corporate
Trend Micro ≫ Officescan Version 3.0 Edition corporate_for_windows_nt_server
Trend Micro ≫ Officescan Version 3.1.1 Edition corporate_for_windows_nt_server
Trend Micro ≫ Officescan Version 3.5 Edition corporate
Trend Micro ≫ Officescan Version 3.5 Edition corporate_for_windows_nt_server
Trend Micro ≫ Officescan Version 3.11 Edition corporate
Trend Micro ≫ Officescan Version 3.11 Edition corporate_for_windows_nt_server
Trend Micro ≫ Officescan Version 3.13 Edition corporate
Trend Micro ≫ Officescan Version 3.13 Edition corporate_for_windows_nt_server
Trend Micro ≫ Officescan Version 3.54 Edition corporate
Trend Micro ≫ Virus Buster Version 3.52 Edition corporate
Trend Micro ≫ Virus Buster Version 3.53 Edition corporate
Trend Micro ≫ Virus Buster Version 3.54 Edition corporate
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 7.66% 0.938
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0020.html
http://kb.trendmicro.com/solutions/solutionDetail.asp?solutionId=13353
http://secunia.com/advisories/7881
Vendor Advisory
http://www.osvdb.org/6181
http://www.securityfocus.com/bid/6616
Patch
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/11059