CVE-2003-1341: trend_micro officescan Configuration
Vulnerability summary
CVE-2003-1341 is a high (CVSS 7.5) Configuration vulnerability in trend_micro officescan. EPSS estimates a 7.66% chance of exploitation in the next 30 days, higher than 94.5% of scored vulnerabilities. 2 public exploits are recorded.
Timeline
- 14-10-2007PublishedVulnerability first disclosed.
- 08-08-2024Last modifiedVulnerability information updated.
Description
The default installation of Trend Micro OfficeScan 3.0 through 3.54 and 5.x allows remote attackers to bypass authentication from cgiChkMasterPasswd.exe and gain access to the web management console via a direct request to cgiMasterPwd.exe.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
7.66%
Chance of exploitation in the next 30 days
Percentile
95%
Versus all other CVEs
30-day change
0.00 pp
From 7.66% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundExploit Reference (securityfocus.com)
Maturity: unknown
Trend Micro OfficeScan 3.x - CGI Directory Insufficient Permissions
Maturity: weaponized
Weaknesses
CWE · root causeAffected systems
Trend_micro2 products
- officescan3.0 | 3.1.1 | 3.5 | 3.13 | 3.54
- virus_buster3.52 | 3.53 | 3.54
1 vendor · 2 products
References
6 links- kb.trendmicro.com/solutions/solutionDetail.asp?solutionId=13353X Refsource CONFIRM