PT-2006-3756 · F Secure+1 · F-Secure Anti-Virus For Microsoft Exchange+2

Published 2006-06-06 · Updated 2017-07-20 · CVE-2006-2838

Positive Technologies (AI Summary)

CVSS v2.0

7.6

High

Base vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions F-Secure Anti-Virus for Microsoft Exchange version 6.40 F-Secure Internet Gatekeeper versions 6.40 through 6.42 F-Secure Internet Gatekeeper version 6.50

Description A buffer overflow issue exists in the web console, potentially allowing remote attackers to cause a denial of service or possibly execute arbitrary code. By default, connections are only allowed from the local host.

Recommendations For F-Secure Anti-Virus for Microsoft Exchange version 6.40, update to a version that includes a fix for this issue. For F-Secure Internet Gatekeeper versions 6.40 through 6.42, update to a version that includes a fix for this issue. For F-Secure Internet Gatekeeper version 6.50, update to a version that includes a fix for this issue.

Fix

Related Identifiers

CVE-2006-2838

Affected Products

F-Secure Anti-Virus For Microsoft Exchange

F-Secure Internet Gatekeeper

Exchange Server

References · 7

• http://secunia.com/advisories/20407 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-2838 · Security Note
• http://f-secure.com/security/fsc-2006-3.shtml · Patch
• http://securitytracker.com/id?1016197 · Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26799 · Note
• http://securitytracker.com/id?1016196 · Note
• http://vupen.com/english/advisories/2006/2076 · Note