Rapid7 Advisory R7-0023 Symantec Scan Engine File Disclosure Vulnerability: There is a vulnerability in Symantec Scan Engine which allows unauthenticated remote users to download any file located under the Symantec Scan Engine installation directory. For instance the configuration file, the scanning logs, as well as the current virus definitions can all be accessed by any remote user using regular or specially crafted HTTP requests.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/45715/R7-0023.txt
Source: https://packetstormsecurity.com/files/45715/Rapid7-Security-Advisory-23.html