CVE-2003-1344

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2003-12-31 · updated 2026-06-16
Weakness: CWE-310

Description

Trend Micro Virus Control System (TVCS) Log Collector allows remote attackers to obtain usernames, encrypted passwords, and other sensitive information via a URL request for getservers.exe with the action parameter set to "selects1", which returns log files.

Affected products

Trend Micro Virus Control System: all versions

References

http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0021.html
http://secunia.com/advisories/7881
http://www.securityfocus.com/bid/6618
https://exchange.xforce.ibmcloud.com/vulnerabilities/11063
http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0021.html
http://secunia.com/advisories/7881
http://www.securityfocus.com/bid/6618
https://exchange.xforce.ibmcloud.com/vulnerabilities/11063

Get alerted when CVE-2003-1344 or the next vulnerability affects your stack