CVE-2005-1930

CVE-2005-1930 describes a directory traversal vulnerability in the Crystal Report component (rptserver.asp) of Trend Micro ServerProtect Management Console 5.58, and potentially earlier versions, including its use in Control Manager 2.5 and 3.0, and Damage Cleanup Server 1.1. This flaw allows unauthenticated remote attackers to read arbitrary files on the affected system by manipulating the IMAGE parameter. With a CVSS score of 5.0, this vulnerability is of medium severity, requiring no authentication and having low attack complexity, though its impact is limited to confidentiality (information disclosure). There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.