Login Request a demo
Unscored severity · published Dec 31, 2003
CVE-2003-1341
The default installation of Trend Micro OfficeScan 3.0 through 3.54 and 5.x allows remote attackers to bypass authentication from cgiChkMasterPasswd.exe and gain access to the web…
–
CVSS
7.7%
EPSS
No
On KEV
Description
The default installation of Trend Micro OfficeScan 3.0 through 3.54 and 5.x allows remote attackers to bypass authentication from cgiChkMasterPasswd.exe and gain access to the web management console via a direct request to cgiMasterPwd.exe.
Exploitation
Is it being used?
Exploit prediction (EPSS)7.7% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OF
Officescan · Trend Micro
3.0; 3.0; 3.1.1; 3.5; 3.5; 3.11; +4 more · source: NVD
VB
Virus Buster · Trend Micro
3.52; 3.53; 3.54 · source: NVD
Affected product
OF
Officescan
Trend Micro
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2003-1341
CVE.org
https://www.cve.org/CVERecord?id=CVE-2003-1341
archives.neohapsis.com
http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0020.html
kb.trendmicro.com
http://kb.trendmicro.com/solutions/solutionDetail.asp?solutionId=13353
Vendor Advisory
http://secunia.com/advisories/7881
www.osvdb.org
http://www.osvdb.org/6181
Exploit
http://www.securityfocus.com/bid/6616
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/11059
More from Officescan
7.5
CVE-2019-18187
Trend Micro OfficeScan Directory Traversal Vulnerability
–
CVE-2008-3866
The Trend Micro Personal Firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet…
–
CVE-2008-3865
Multiple heap-based buffer overflows in the ApiThread function in the firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend…
–
CVE-2008-3864
The ApiThread function in the firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and…
–
CVE-2008-3862
Stack-based buffer overflow in CGI programs in the server in Trend Micro OfficeScan 7.3 Patch 4 build 1367 and other builds before 1374, and 8.0 SP1 Patch 1 before build 3110,…