CVE-2003-1344

CVE-2003-1344 describes an information disclosure vulnerability in Trend Micro Virus Control System (TVCS) Log Collector. Remote attackers can exploit this by sending a crafted URL request to getservers.exe, specifically with the "action=selects1" parameter, to retrieve sensitive log files containing usernames and encrypted passwords. This vulnerability has a CVSS score of 5.0, indicating a medium severity, as it requires no authentication and has low attack complexity, potentially leading to unauthorized access to sensitive data. While there is no evidence of active exploitation, public exploit code exists on ExploitDB, and the CVE has garnered significant community discussion, suggesting awareness among security researchers.