Vulnerability Description
Trend Micro ScanMail for Exchange (SMEX) before 3.81 and before 6.1 might install a back door account in smg_Smxcfg30.exe, which allows remote attackers to gain access to the web management interface via the vcc parameter, possibly "3560121183d3".
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Trend Micro | Scanmail | <= 3.8 |
Related Weaknesses (CWE)
References
- http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0021.html
- http://kb.trendmicro.com/solutions/solutionDetail.asp?solutionId=13352
- http://secunia.com/advisories/7881Vendor Advisory
- http://www.securityfocus.com/bid/6619ExploitPatch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11061
- http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0021.html
- http://kb.trendmicro.com/solutions/solutionDetail.asp?solutionId=13352
- http://secunia.com/advisories/7881Vendor Advisory
- http://www.securityfocus.com/bid/6619ExploitPatch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11061
FAQ
What is CVE-2003-1343?
CVE-2003-1343 is a vulnerability with a CVSS score of 7.5 (HIGH). Trend Micro ScanMail for Exchange (SMEX) before 3.81 and before 6.1 might install a back door account in smg_Smxcfg30.exe, which allows remote attackers to gain access to the web management interface ...
How severe is CVE-2003-1343?
CVE-2003-1343 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2003-1343?
Check the references section above for vendor advisories and patch information. Affected products include: Trend Micro Scanmail.