iDefense Security Advisory 07.16.07 – Remote exploitation of an authorization bypass vulnerability in Trend Micro Inc.’s OfficeScan for Windows could allow attackers to login to the management console and alter application settings. The OfficeScan installation includes a web management console that allows administrators to configure the application and the Antivirus clients it manages. The web interface login is handled by cgiChkMasterPwd.exe which is passed a hash and an encrypted version of the password generated by an ActiveX control on the login page. If cgiChkMasterPwd.exe is sent an empty encryption string and empty hash it proceeds to issue the client a valid session id which can then be used to access the web management console. iDefense has confirmed the existence of this vulnerability in OfficeScan for Windows 7.3 with all current patches applied. Previous versions may also be affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/57787/07.16.07-2.txt
Source: https://packetstormsecurity.com/files/57787/iDEFENSE-Security-Advisory-2007-07-16.2.html