CVE-2001-1151

Affected product : Trend Micro OfficeScan Corporate Edition (Virus Buster Corporate Edition). Vulnerability : Remote disclosure of sensitive configuration data via unauthenticated access to /officescan/hotdownload, specifically reading the configuration file ofcscan.ini which contains a weakly en...

CVE-2001-1150

CVE-2001-1150 corresponds to a vulnerability in Trend Micro OfficeScan Corporate Edition (Virus Buster) 3.5.2–3.5.4 where the CGI binary cgiWebupdate.exe exposes an information-disclosure/privilege-escalation flaw. The available connected sources describe an information disclosure vulnerability t...

CVE-2003-1341

The CVE-2003-1341 entry concerns Trend Micro OfficeScan web management console authentication bypass. Affected products are OfficeScan 3.0–3.54 and 5.x, where an attacker can bypass authentication and gain access to the web console by issuing a direct request to cgiMasterPwd.exe after bypassing c...