CVEvulnerability
CVE-2001-1151
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2001-10-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Description
Trend Micro OfficeScan Corporate Edition (aka Virus Buster) 3.53 allows remote attackers to access sensitive information from the hotdownload directory without authentication, such as the ofcscan.ini configuration file, which contains a weakly encrypted password.
Affected configurations
• trend micro officescan corporate 3.53
• trend micro virus buster corporate 3.53
References
- http://www.securityfocus.com/archive/1/220666 Patch, Vendor Advisory
- http://www.trendmicro.co.jp/esolution/solutionDetail.asp?solutionID=318 www.trendmicro.co.jp
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7286 exchange.xforce.ibmcloud.com
- http://www.securityfocus.com/archive/1/220666 Patch, Vendor Advisory
- http://www.trendmicro.co.jp/esolution/solutionDetail.asp?solutionID=318 www.trendmicro.co.jp
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7286 exchange.xforce.ibmcloud.com