7.5

CVE-2003-1341

Exploit
The default installation of Trend Micro OfficeScan 3.0 through 3.54 and 5.x allows remote attackers to bypass authentication from cgiChkMasterPasswd.exe and gain access to the web management console via a direct request to cgiMasterPwd.exe.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Trend Micro ≫ Officescan Version3.0 Editioncorporate
Trend Micro ≫ Officescan Version3.0 Editioncorporate_for_windows_nt_server
Trend Micro ≫ Officescan Version3.1.1 Editioncorporate_for_windows_nt_server
Trend Micro ≫ Officescan Version3.5 Editioncorporate
Trend Micro ≫ Officescan Version3.5 Editioncorporate_for_windows_nt_server
Trend Micro ≫ Officescan Version3.11 Editioncorporate
Trend Micro ≫ Officescan Version3.11 Editioncorporate_for_windows_nt_server
Trend Micro ≫ Officescan Version3.13 Editioncorporate
Trend Micro ≫ Officescan Version3.13 Editioncorporate_for_windows_nt_server
Trend Micro ≫ Officescan Version3.54 Editioncorporate
Trend Micro ≫ Virus Buster Version3.52 Editioncorporate
Trend Micro ≫ Virus Buster Version3.53 Editioncorporate
Trend Micro ≫ Virus Buster Version3.54 Editioncorporate
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 7.66% 0.938
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0020.html
http://kb.trendmicro.com/solutions/solutionDetail.asp?solutionId=13353
http://secunia.com/advisories/7881
Vendor Advisory
http://www.osvdb.org/6181
http://www.securityfocus.com/bid/6616
Patch
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/11059