CVSS: 9.8EPSS: 4%CPEs: 13EXPL: 2CVE-2003-1341 – Trend Micro OfficeScan 3.x - CGI Directory Insufficient Permissions
https://notcve.org/view.php?id=CVE-2003-1341
31 Dec 2003 — The default installation of Trend Micro OfficeScan 3.0 through 3.54 and 5.x allows remote attackers to bypass authentication from cgiChkMasterPasswd.exe and gain access to the web management console via a direct request to cgiMasterPwd.exe. • https://www.exploit-db.com/exploits/22171 • CWE-16: Configuration •
CVSS: 7.5EPSS: 1%CPEs: 2EXPL: 0CVE-2001-1151
https://notcve.org/view.php?id=CVE-2001-1151
15 Oct 2001 — Trend Micro OfficeScan Corporate Edition (aka Virus Buster) 3.53 allows remote attackers to access sensitive information from the hotdownload directory without authentication, such as the ofcscan.ini configuration file, which contains a weakly encrypted password. • http://www.securityfocus.com/archive/1/220666 •
CVSS: 7.5EPSS: 0%CPEs: 5EXPL: 0CVE-2001-1150
https://notcve.org/view.php?id=CVE-2001-1150
22 Aug 2001 — Vulnerability in cgiWebupdate.exe in Trend Micro OfficeScan Corporate Edition (aka Virus Buster) 3.5.2 through 3.5.4 allows remote attackers to read arbitrary files. • http://www.iss.net/security_center/static/7014.php •