PT-2006-3756 · F Secure+1 · F-Secure Anti-Virus For Microsoft Exchange+2

Publicado 2006-06-06 · Atualizado 2017-07-20 · CVE-2006-2838

Positive Technologies (AI Summary)

CVSS v2.0

7.6

Alta

Vetor base

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions F-Secure Anti-Virus for Microsoft Exchange version 6.40 F-Secure Internet Gatekeeper versions 6.40 through 6.42 F-Secure Internet Gatekeeper version 6.50

Description A buffer overflow issue exists in the web console, potentially allowing remote attackers to cause a denial of service or possibly execute arbitrary code. By default, connections are only allowed from the local host.

Recommendations For F-Secure Anti-Virus for Microsoft Exchange version 6.40, update to a version that includes a fix for this issue. For F-Secure Internet Gatekeeper versions 6.40 through 6.42, update to a version that includes a fix for this issue. For F-Secure Internet Gatekeeper version 6.50, update to a version that includes a fix for this issue.

Correção

Identificadores relacionados

CVE-2006-2838

Produtos afetados

F-Secure Anti-Virus For Microsoft Exchange

F-Secure Internet Gatekeeper

Exchange Server

Referências · 7

• http://secunia.com/advisories/20407 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2006-2838 · Nota de Segurança
• http://f-secure.com/security/fsc-2006-3.shtml · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26799 · Nota
• http://securitytracker.com/id?1016196 · Nota
• http://vupen.com/english/advisories/2006/2076 · Nota
• http://securitytracker.com/id?1016197 · Correção