Vulnerability in Trend Micro Officescan

CVE-2001-1151

Trend Micro OfficeScan Corporate Edition (aka Virus Buster) 3.53 allows remote attackers to access sensitive information from the hotdownload directory without authentication, such as the ofcscan.ini configuration file, which contains a weakly encrypted password.

EPSS: 0.024 (82.4th percentile) — read the EPSS interpretation.

Affected products

Trend_micro Officescan — versions corporate_3.53
Trend_micro Virus_buster — versions corporate_3.53
N/a — versions n/a

References

cve@mitre.org (x_refsource_MISC)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ, Patch)