CVE-2001-0133: Critical severity Trend Micro InterScan VirusWall vulnerability
The web administration interface for Interscan VirusWall 3.6.x and earlier does not use encryption, which could allow remote attackers to obtain the administrator password to sniff the administrator password via the setpasswd.cgi program or other HTTP GET requests that contain base64 encoded usernames and passwords.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2001-0133?
CVE-2001-0133 is classified as a high-severity vulnerability due to its potential to expose sensitive authentication credentials.
How do I fix CVE-2001-0133?
To mitigate CVE-2001-0133, upgrade to an updated version of Interscan VirusWall that implements encryption for its web administration interface.
What systems are affected by CVE-2001-0133?
CVE-2001-0133 affects Interscan VirusWall versions 3.6.x and earlier.
What could an attacker do with CVE-2001-0133?
An attacker could exploit CVE-2001-0133 to capture the administrator password through unencrypted HTTP requests.
Is there a workaround for CVE-2001-0133?
A possible workaround for CVE-2001-0133 is to restrict access to the web administration interface through firewalls or by securing it behind a VPN.