Description
Trend Micro ScanMail for Exchange (SMEX) before 3.81 and before 6.1 might install a back door account in smg_Smxcfg30.exe, which allows remote attackers to gain access to the web management interface via the vcc parameter, possibly "3560121183d3".
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- Trend Micro ScanMail For Exchange 3.8 - Authentication Bypass EDB-22174 · remote · Jan 15, 2003 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 7881 third-party-advisory
- http://kb.trendmicro.com/solutions/solutionDetail.asp?solutionId=13352
- scanmail-smgsmxcfg30-password-bypass(11061) vdb-entry
- 6619 vdb-entry
- 20030114 RE: [VulnWatch] Assorted Trend Vulns Rev 2.0 mailing-list