CVE-2003-1341 The default installation of Trend Micro OfficeScan 3.0 through 3.54 and 5.x allows remote attackers to bypass authentication from cgiChkMasterPasswd.exe and gain access to the web management console v...
HighCVSS 7.5
EPSS 7.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The default installation of Trend Micro OfficeScan 3.0 through 3.54 and 5.x allows remote attackers to bypass authentication from cgiChkMasterPasswd.exe and gain access to the web management console via a direct request to cgiMasterPwd.exe.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| trend micro officescan | = 3.0 | No fix listed |
| trend micro officescan | = 3.1.1 | No fix listed |
| trend micro officescan | = 3.5 | No fix listed |
| trend micro officescan | = 3.11 | No fix listed |
| trend micro officescan | = 3.13 | No fix listed |
| trend micro officescan | = 3.54 | No fix listed |
| trend micro virus buster | = 3.52 | No fix listed |
| trend micro virus buster | = 3.53 | No fix listed |
| trend micro virus buster | = 3.54 | No fix listed |
References
- 20030114 Assorted Trend Vulns Rev 2.0 mailing-list
- kb.trendmicro.com
- 7881 third-party-advisory vendor-advisory
- 6181 vdb-entry
- 6616 exploit patch vdb-entry
- officescan-cgichkmasterpwd-auth-bypass(11059) vdb-entry