CVE-2001-0133 Information disclosure in n/a
Remote attackers can sniff administrator credentials from unencrypted HTTP traffic in Interscan VirusWall, leading to potential account takeover.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2001-0133?
CVE-2001-0133 is a critical vulnerability in n/a, published on 14 Feb 2001. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The web administration interface for Interscan VirusWall 3.6.x and earlier does not use encryption, which could allow remote attackers to obtain the administrator password to sniff the administrator password via the setpasswd.cgi program or other HTTP GET requests that contain base64 encoded usernames and passwords.
Which versions are affected by CVE-2001-0133?
It affects 1 product.
Products include Trend Micro Interscan Viruswall.
How do I fix CVE-2001-0133?
No fix has been published for CVE-2001-0133 yet. Limit exposure of the affected software until one is available.
Is CVE-2001-0133 being exploited?
There is no known exploitation of CVE-2001-0133 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-v3cg-qj8r-xhpc.