VULNERABILITY INTELLIGENCE

CVE-2001-1151

CVSS score5 MEDIUM
EPSS probability2.41%
CISA KEVNot currently listed
Published2001-10-15
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N

Description

Trend Micro OfficeScan Corporate Edition (aka Virus Buster) 3.53 allows remote attackers to access sensitive information from the hotdownload directory without authentication, such as the ofcscan.ini configuration file, which contains a weakly encrypted password.

Primary references