WEB_CGI setpasswd.cgi access

 

Code: p998

Severity: Notice

 

Description: This event is generated when an attempt is made to access setpasswd.cgi on an internal web server. This may indicate an attempt to exploit an authentication vulnerability in Trend Micro Interscan VirusWall 3.0.1 and 3.6.x.

Impact: Information disclosure, VirusWall administrative access.

Corrective: Upgrade to a newer version of Trend Micro VirusWall. Otherwise, do not use web-based configuration tools.