CVEvulnerability
CVE-2007-3455
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-06-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
cgiChkMasterPwd.exe before 8.0.0.142 in Trend Micro OfficeScan Corporate Edition 8.0 allows remote attackers to bypass the password requirement and gain access to the Management Console via an empty hash and empty encrypted password string, related to "stored decrypted user logon information."
Affected configurations
• trend micro officescan 8.0
Related
Weakness · not in database (1)
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=558 labs.idefense.com
- http://osvdb.org/36628 osvdb.org
- http://secunia.com/advisories/25778 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/24641 www.securityfocus.com
- http://www.securityfocus.com/bid/24935 www.securityfocus.com
- http://www.securitytracker.com/id?1018320 www.securitytracker.com
- http://www.trendmicro.com/ftp/documentation/readme/osce_80_win_en_securitypatch_b1042_readme.txt Patch
- http://www.vupen.com/english/advisories/2007/2330 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35052 exchange.xforce.ibmcloud.com
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=558 labs.idefense.com
- http://osvdb.org/36628 osvdb.org
- http://secunia.com/advisories/25778 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/24641 www.securityfocus.com
- http://www.securityfocus.com/bid/24935 www.securityfocus.com
- http://www.securitytracker.com/id?1018320 www.securitytracker.com
- http://www.trendmicro.com/ftp/documentation/readme/osce_80_win_en_securitypatch_b1042_readme.txt Patch
- http://www.vupen.com/english/advisories/2007/2330 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35052 exchange.xforce.ibmcloud.com