Vulnerability in cgiWebupdate.exe in Trend Micro OfficeScan Corporate Edition (aka Virus Buster) 3.5.2 through 3.5.4 allows remote attackers to read arbitrary files.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2001-1131
http://www.securityfocus.com/bid/3216
http://www.securityfocus.com/archive/1/210087