NVD

Id
55607  
Name
CVE-2007-3455  
Description
cgiChkMasterPwd.exe before 8.0.0.142 in Trend Micro OfficeScan Corporate Edition 8.0 allows remote attackers to bypass the password requirement and gain access to the Management Console via an empty hash and empty encrypted password string, related to "stored decrypted user logon information."  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-06-26  
Modified Date
2012-10-30  
Seq
2007-3455  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
282698 55607 CVE-2007-3455 20070716 Trend Micro OfficeScan Management Console Authorization Bypass Vulnerability  View
282699 55607 CVE-2007-3455 24641  View
282700 55607 CVE-2007-3455 24935  View
282701 55607 CVE-2007-3455 1018320  View
282702 55607 CVE-2007-3455 http://www.trendmicro.com/ftp/documentation/readme/osce_80_win_en_securitypatch_b1042_readme.txt  View
282703 55607 CVE-2007-3455 ADV-2007-2330  View
282704 55607 CVE-2007-3455 officescan-cgichkmasterpwd-security-bypass(35052)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57080 JVNDB-2007-005772 Trend Micro OfficeScan Corporate Edition の cgiChkMasterPwd.exe におけるパスワード要件を回避される脆弱性 Trend Micro OfficeScan Corporate Edition の cgiChkMasterPwd.exe は、"暗号化され格納されたユーザログイン情報" に関する処理に不備があるため、パスワード要件を回避される、および管理コンソールへのアクセス権を取得される脆弱性が存在します。 CVE-2007-3455 26810 CVE-2007-3455 55607 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005772.html 2007-06-26 2012-12-20 View