CVE-2003-1344

Trend Micro Virus Control System - Information Disclosure via Log Collector getservers.exe Action Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2003-1344. PoCs published by Rod Boron.

AI-analyzed exploit summary This is a writeup describing an information disclosure vulnerability in TVCS where log files containing sensitive data (usernames and passwords) can be accessed via a specific URL. The provided URL demonstrates the exploit path but lacks executable code.

Description

Trend Micro Virus Control System (TVCS) Log Collector allows remote attackers to obtain usernames, encrypted passwords, and other sensitive information via a URL request for getservers.exe with the action parameter set to "selects1", which returns log files.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Rod Boron · textremotewindows
https://www.exploit-db.com/exploits/22173

This is a writeup describing an information disclosure vulnerability in TVCS where log files containing sensitive data (usernames and passwords) can be accessed via a specific URL. The provided URL demonstrates the exploit path but lacks executable code.

Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: TVCS (version not specified)
No auth needed
Prerequisites: Network access to the TVCS server
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/7881
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/11063
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/6618
Third Party Advisory mailing-list x_refsource_vulnwatch
http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0021.html

Scores

EPSS 0.0251
EPSS Percentile 82.8%

Details

CWE
CWE-310
Status published
Products (1)
trend_micro/virus_control_system
Published Dec 31, 2003
Tracked Since Feb 18, 2026