CVE-2003-1343 Trend Micro ScanMail for Exchange (SMEX) before 3.81 and before 6.1 might install a back door account in smg_Smxcfg30.exe, which allows remote attackers to gain access to the web management interface....
HighCVSS 7.5
EPSS 2.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Trend Micro ScanMail for Exchange (SMEX) before 3.81 and before 6.1 might install a back door account in smg_Smxcfg30.exe, which allows remote attackers to gain access to the web management interface via the vcc parameter, possibly "3560121183d3".
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| trend micro scanmail | <= 3.8 | No fix listed |
| trend micro scanmail | <= 6.0 | No fix listed |
References
- 20030114 RE: [VulnWatch] Assorted Trend Vulns Rev 2.0 mailing-list
- kb.trendmicro.com
- 7881 third-party-advisory vendor-advisory
- 6619 exploit patch vdb-entry
- scanmail-smgsmxcfg30-password-bypass(11061) vdb-entry