Trend Micro ScanMail for Microsoft Exchange Predictable Random Number Generator Weakness
BID:74661
Info
Trend Micro ScanMail for Microsoft Exchange Predictable Random Number Generator Weakness
| Bugtraq ID: | 74661 |
| Class: | Design Error |
| CVE: |
CVE-2015-3326 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 20 2015 12:00AM |
| Updated: | Apr 20 2015 12:00AM |
| Credit: | The vendor reported this issue. |
| Vulnerable: |
Trend Micro ScanMail for Microsoft Exchange 11.0 Trend Micro ScanMail for Microsoft Exchange 10.2 |
| Not Vulnerable: |
Trend Micro ScanMail for Microsoft Exchange 11.0 Build 4180 Trend Micro ScanMail for Microsoft Exchange 10.2 Build 3318 |
Discussion
Trend Micro ScanMail for Microsoft Exchange Predictable Random Number Generator Weakness
Trend Micro ScanMail for Microsoft Exchange is prone to a predictable random number generator weakness.
Successful exploits will allow remote attackers to perform brute-force attacks to get the web session ID and gain access to the web console. This may aid in further attacks.
Trend Micro ScanMail for Microsoft Exchange is prone to a predictable random number generator weakness.
Successful exploits will allow remote attackers to perform brute-force attacks to get the web session ID and gain access to the web console. This may aid in further attacks.
Exploit / POC
Trend Micro ScanMail for Microsoft Exchange Predictable Random Number Generator Weakness
An attacker can exploit this issue using readily available tools.
An attacker can exploit this issue using readily available tools.