Description
Trend Micro Control Manager 3.0 Enterprise Edition allows remote attackers to gain privileges via a replay attack of the encrypted username and password.
References
- 20050113 Trend Micro Control Manager - Enterprise Edition 3.0 Web application Replay attack mailing-list
- http://www.cirt.dk/advisories/cirt-28-advisory.pdf
- control-manager-replay-attack(18887) vdb-entry
- 20050113 Trend Micro Control Manager - Enterprise Edition 3.0 Web application Replay attack mailing-list