CVE-2001-1151

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2001-10-15 · updated 2026-06-16

Description

Trend Micro OfficeScan Corporate Edition (aka Virus Buster) 3.53 allows remote attackers to access sensitive information from the hotdownload directory without authentication, such as the ofcscan.ini configuration file, which contains a weakly encrypted password.

Affected products

Trend Micro Officescan: corporate_3.53
Trend Micro Virus Buster: corporate_3.53

References

http://www.securityfocus.com/archive/1/220666
http://www.trendmicro.co.jp/esolution/solutionDetail.asp?solutionID=318
https://exchange.xforce.ibmcloud.com/vulnerabilities/7286
http://www.securityfocus.com/archive/1/220666
http://www.trendmicro.co.jp/esolution/solutionDetail.asp?solutionID=318
https://exchange.xforce.ibmcloud.com/vulnerabilities/7286

Get alerted when CVE-2001-1151 or the next vulnerability affects your stack