Unscored severity · published Jun 27, 2007
CVE-2007-3455
cgiChkMasterPwd.exe before 8.0.0.142 in Trend Micro OfficeScan Corporate Edition 8.0 allows remote attackers to bypass the password requirement and gain access to the Management…
–
CVSS
3%
EPSS
No
On KEV
Description
cgiChkMasterPwd.exe before 8.0.0.142 in Trend Micro OfficeScan Corporate Edition 8.0 allows remote attackers to bypass the password requirement and gain access to the Management Console via an empty hash and empty encrypted password string, related to "stored decrypted user logon information."
Exploitation
Is it being used?
Exploit prediction (EPSS)3.0% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OF
Officescan · Trend Micro
8.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-3455
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-3455
labs.idefense.com
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=558
osvdb.org
http://osvdb.org/36628
Patch
http://secunia.com/advisories/25778
www.securityfocus.com
http://www.securityfocus.com/bid/24641
www.securityfocus.com
http://www.securityfocus.com/bid/24935
www.securitytracker.com
http://www.securitytracker.com/id?1018320
More from Officescan
7.5
CVE-2019-18187
Trend Micro OfficeScan Directory Traversal Vulnerability
–
CVE-2008-3866
The Trend Micro Personal Firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet…
–
CVE-2008-3865
Multiple heap-based buffer overflows in the ApiThread function in the firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend…
–
CVE-2008-3864
The ApiThread function in the firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and…
–
CVE-2008-3862
Stack-based buffer overflow in CGI programs in the server in Trend Micro OfficeScan 7.3 Patch 4 build 1367 and other builds before 1374, and 8.0 SP1 Patch 1 before build 3110,…