CVE-2001-1151 Trend Micro OfficeScan Corporate Edition (aka Virus Buster) 3.53 allows remote attackers to access sensitive information from the hotdownload directory without authentication, such as the ofcscan.ini....
MediumCVSS 5.0
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Trend Micro OfficeScan Corporate Edition (aka Virus Buster) 3.53 allows remote attackers to access sensitive information from the hotdownload directory without authentication, such as the ofcscan.ini configuration file, which contains a weakly encrypted password.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| trend micro officescan | = corporate_3.53 | No fix listed |
| trend micro virus buster | = corporate_3.53 | No fix listed |
References
- 20011015 [SNS Advisory No.44] Trend Micro OfficeScan Corporate Edition(Virus Buster Corporate Edition) mailing-list patch vendor-advisory
- www.trendmicro.co.jp
- officescan-config-file-access(7286) vdb-entry