VULHUB ™

Trend Micro OfficeScan Corporate Edition is an enterprise-level centrally managed antivirus solution. Virus Buster is the Japanese version of OfficeScan. Both versions are known to be vulnerable to this issue. Due to a flaw in the implementation of the 'hotdownload' virtual directory, it is possible for a user to gain read access of the contents in 'hotdownload' without authenticating. Successful exploitation of this vulnerability could lead to the disclosure of sensitive data which could assist in further attacks against the target host.

Trend Micro OfficeScan Corporate Edition is an enterprise-level centrally managed antivirus solution. Virus Buster is the Japanese version of OfficeScan. Both versions are known to be vulnerable to this issue. Due to a flaw in the implementation of the 'hotdownload' virtual directory, it is possible for a user to gain read access of the contents in 'hotdownload' without authenticating. Successful exploitation of this vulnerability could lead to the disclosure of sensitive data which could assist in further attacks against the target host.