medium5.0
CVE-2001-1151
Trend Micro OfficeScan Corporate Edition (aka Virus Buster) 3.53 allows remote attackers to access sensitive information from the hotdownload directory without…
Impact
Trend Micro OfficeScan Corporate Edition (aka Virus Buster) 3.53 allows remote attackers to access sensitive information from the hotdownload directory without authentication, such as the ofcscan.ini configuration file, which contains a weakly encrypted password.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Trend Micro | Officescan | Version corporate_3.53 |
| Trend Micro | Virus Buster | Version corporate_3.53 |
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/archive/1/220666
- http://www.trendmicro.co.jp/esolution/solutionDetail.asp?solutionID=318
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7286
- http://www.securityfocus.com/archive/1/220666
- http://www.trendmicro.co.jp/esolution/solutionDetail.asp?solutionID=318
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7286