CVE:CVE-2008-2439
CNNVD:CNNVD-200810-023
Trend Micro OfficeScan, OfficeScan, OfficeScan, 以及Worry-Free Business Security的客户端的TmListen.exe中的UpdateAgent函数存在目录遍历漏洞，远程攻击者通过一个HTTP请求中的目录遍历序列来读取任意文件。
solution:Upgrade trend_micro officescan to a higher version than 7.3,8.0:sp1,8.0:sp1_patch1,and avoid the version 7.3,8.0:sp1,8.0:sp1_patch1; Upgrade trend_micro worry_free_business_security to a higher version than 5.0,and avoid the version 5.0