Unscored severity · published Dec 31, 2003
CVE-2003-1343
Trend Micro ScanMail for Exchange (SMEX) before 3.81 and before 6.1 might install a back door account in smg_Smxcfg30.exe, which allows remote attackers to gain access to the web…
–
CVSS
2.6%
EPSS
No
On KEV
Description
Trend Micro ScanMail for Exchange (SMEX) before 3.81 and before 6.1 might install a back door account in smg_Smxcfg30.exe, which allows remote attackers to gain access to the web management interface via the vcc parameter, possibly "3560121183d3".
Exploitation
Is it being used?
Exploit prediction (EPSS)2.6% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SC
Scanmail · Trend Micro
through 3.8; through 6.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2003-1343
CVE.org
https://www.cve.org/CVERecord?id=CVE-2003-1343
archives.neohapsis.com
http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0021.html
kb.trendmicro.com
http://kb.trendmicro.com/solutions/solutionDetail.asp?solutionId=13352
Vendor Advisory
http://secunia.com/advisories/7881
Exploit
http://www.securityfocus.com/bid/6619
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/11061
More from Scanmail
–
CVE-2015-3326
Trend Micro ScanMail for Microsoft Exchange (SMEX) 10.2 before Hot Fix Build 3318 and 11.0 before Hot Fix Build 4180 creates session IDs for the web console using a random number…
–
CVE-2007-0851
Buffer overflow in the Trend Micro Scan Engine 8.000 and 8.300 before virus pattern file 4.245.00, as used in other products such as Cyber Clean Center (CCC) Cleaner, allows…
–
CVE-2005-0533
Heap-based buffer overflow in Trend Micro AntiVirus Library VSAPI before 7.510, as used in multiple Trend Micro products, allows remote attackers to execute arbitrary code via a…