VulnerabilityModified
CVE-2003-1341
The default installation of Trend Micro OfficeScan 3.0 through 3.54 and 5.x allows remote attackers to bypass authentication from cgiChkMasterPasswd.exe and gain access to the web management console via a direct request to cgiMasterPwd.exe.
HIGH 7.5EPSS 7.66%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (7.66%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
The default installation of Trend Micro OfficeScan 3.0 through 3.54 and 5.x allows remote attackers to bypass authentication from cgiChkMasterPasswd.exe and gain access to the web management console via a direct request to cgiMasterPwd.exe.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 7.66% probability · 94th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-16
- Affected
- trend micro/officescan · trend micro/virus buster
- Source
- cve@mitre.org
References
- http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0020.html
- http://kb.trendmicro.com/solutions/solutionDetail.asp?solutionId=13353
- http://secunia.com/advisories/7881Vendor Advisory
- http://www.osvdb.org/6181
- http://www.securityfocus.com/bid/6616Exploit, Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11059
- http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0020.html
- http://kb.trendmicro.com/solutions/solutionDetail.asp?solutionId=13353
- http://secunia.com/advisories/7881Vendor Advisory
- http://www.osvdb.org/6181
- http://www.securityfocus.com/bid/6616Exploit, Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11059
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.