CVE-2001-0586: Medium severity Trend Micro Scanmail Exchange vulnerability

Published Aug 22, 2001

Updated

TrendMicro ScanMail for Exchange 3.5 Evaluation allows a local attacker to recover the administrative credentials for ScanMail via a combination of unprotected registry keys and weakly encrypted passwords.

Affected Software

1 affected component

Trend Micro Scanmail Exchange=3.5

Remediation

Patch Available

http://archives.neohapsis.com/archives/ntbugtraq/2001-q1/0049.html

Event History

Aug 22, 2001

CVE Published

04:00 AM

Mar 9, 2002

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2001-0586?

CVE-2001-0586 has a medium severity rating due to the potential for unauthorized access to administrative credentials.

How do I fix CVE-2001-0586?

To fix CVE-2001-0586, ensure that registry keys are adequately protected and avoid using weak encryption for sensitive passwords.

What are the potential impacts of CVE-2001-0586?

The potential impacts of CVE-2001-0586 include unauthorized access to administrative functions in Trend Micro ScanMail for Exchange.

Who is affected by CVE-2001-0586?

Users of Trend Micro ScanMail for Exchange version 3.5 are affected by CVE-2001-0586.

Is there a patch available for CVE-2001-0586?

There is no specific patch documented for CVE-2001-0586, but users should follow best security practices to mitigate the risk.