Lucene search
HistoryMar 09, 2002 - 5:00 a.m.
CVE-2001-0586
cve-2001-0586
trendmicro scanmail
exchange 3.5
local attack
unprotected registry
weak encryption.
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.8 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
TrendMicro ScanMail for Exchange 3.5 Evaluation allows a local attacker to recover the administrative credentials for ScanMail via a combination of unprotected registry keys and weakly encrypted passwords.
Affected configurations
Node
trend_microscanmail_exchangeMatch3.5
| CPE | Name | Operator | Version |
|---|---|---|---|
| trend_micro:scanmail_exchange | trend micro scanmail exchange | eq | 3.5 |
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.8 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2001-0586