PT-2011-2867

Name of the Vulnerable Software and Affected Versions F-Secure Policy Manager versions 7.x through 9.00 before hotfix 4 on Windows and hotfix 2 on Linux F-Secure Policy Manager version 8.00 before hotfix 2 F-Secure Policy Manager version 8.1x before hotfix 3 on Windows and hotfix 2 on Linux...

CVE-2011-1102: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the WebReporting module in F-Secure Policy Manager 7.x, 8.00 before hotfix 2, 8.1x before hotfix 3 on Windows and hotfix 2 on Linux, and 9.00 before hotfix 4 on Windows and hotfix 2 on Linux, allows remote attackers to inject arbitrary web script or HTML...

CVE-2011-1103: Exposure of Sensitive Information to an Unauthorized Actor

The WebReporting module in F-Secure Policy Manager 7.x, 8.00 before hotfix 2, 8.1x before hotfix 3 on Windows and hotfix 2 on Linux, and 9.00 before hotfix 4 on Windows and hotfix 2 on Linux, allows remote attackers to obtain sensitive information via a request to an invalid report, which reveals...

PT-2011-2868

Name of the Vulnerable Software and Affected Versions F-Secure Policy Manager versions 7.x through 9.00 before hotfix 4 on Windows and hotfix 2 on Linux Description The issue allows remote attackers to obtain sensitive information via a request to an invalid report. This is achieved by sending a...

F-Secure Internet Gatekeeper Log File Information Disclosure Vulnerability

F-Secure Internet Gatekeeper is prone to an information-disclosure vulnerability. Attackers can exploit this issue to gain access to sensitive information. Information obtained may lead to other attacks. OpenVAS Vulnerability Test $Id: gbfsecureinternetgatekeeper46381.nasl 7052 2017-09-04 11:50:5...

F-Secure Internet Gatekeeper Log File Information Disclosure Vulnerability

F-Secure Internet Gatekeeper is prone to an information disclosure vulnerability. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progr...

F-Secure Internet Gatekeeper Detection (HTTP)

HTTP based detection of F-Secure Internet Gatekeeper. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-0453

F-Secure Internet Gatekeeper for Linux 3.x before 3.03 does not require authentication for reading access logs, which allows remote attackers to obtain potentially sensitive information via a TCP session on the admin UI port...

Authentication flaw

F-Secure Internet Gatekeeper for Linux 3.x before 3.03 does not require authentication for reading access logs, which allows remote attackers to obtain potentially sensitive information via a TCP session on the admin UI port...

CVE-2011-0453

F-Secure Internet Gatekeeper for Linux 3.x before 3.03 does not require authentication for reading access logs, which allows remote attackers to obtain potentially sensitive information via a TCP session on the admin UI port...

CVE-2011-0453

The CVE covers F-Secure Internet Gatekeeper for Linux, 3.x (pre-3.03). The vulnerability is an authentication flaw that allows reading access logs via the admin UI port, enabling remote attackers to obtain potentially sensitive information from log files. Affected product: F-Secure Internet Gatek...

PT-2011-2356

Name of the Vulnerable Software and Affected Versions F-Secure Internet Gatekeeper for Linux versions 3.x before 3.03 Description The issue allows remote attackers to obtain potentially sensitive information via a TCP session on the admin UI port because it does not require authentication for...

CVE-2011-0453: Improper Authentication

F-Secure Internet Gatekeeper for Linux 3.x before 3.03 does not require authentication for reading access logs, which allows remote attackers to obtain potentially sensitive information via a TCP session on the admin UI port...

F-Secure Internet Gatekeeper Web Console Detection

The remote web server is the Web Console component of F-Secure Internet Gatekeeper, an enterprise-class email and web filtering gateway used to identify malware in incoming and outgoing SMTP, HTTP, FTP and POP3 traffic. C Tenable Network Security, Inc. include"compat.inc"; if description...

F-Secure Internet Gatekeeper for Linux Log Disclosure (FSC-2011-1)

The version of F-Secure Internet Gatekeeper for Linux installed on the remote host allows unauthenticated access to log files, which could allow disclosure of sensitive information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

JVN#71542734: F-Secure Internet Gatekeeper for Linux authentication issue

F-Secure Internet Gatekeeper for Linux provided by F-Secure Corporation is an anti-virus product. F-Secure Internet Gatekeeper for Linux contains an issue where authentication is not present. Impact A remote attacker may view access logs that are stored by the product. Solution Update the firmwar...

ASPR #2011-01-11-1: Remote Binary Planting in Multiple F-Secure Products

=====BEGIN-ACROS-REPORT===== PUBLIC ======================================================================= ACROS Security Problem Report 2011-01-11-1 ------------------------------------------------------------------------- ASPR 2011-01-11-1: Remote Binary Planting in Multiple F-Secure Products...

Zeus Variant Targets Mobile Online Banking Apps

Researchers have discovered a variant of the Zeus bot malware that specifically targets users who perform online-banking operations from the mobile phones, playing on the increasingly common use of SMS-based one-time passwords in order to dupe users into loading the malware. The attack begins wit...

Google Bans GPS Spy App, Developer Cries Foul

Malware may be difficult to define but, as former U.S. Supreme Court Justice Potter Stewart famously quipped about pornography “you know it when you see it.” At least that’s the position being taken by Google and anti malware firms about two applications designed for mobile phones running Google’...

Design/Logic Flaw

F-Secure Internet Security 2010 and earlier; Anti-Virus for Microsoft Exchange 9 and earlier, and for MIMEsweeper 5.61 and earlier; Internet Gatekeeper for Windows 6.61 and earlier, and for Linux 4.02 and earlier; Anti-Virus 2010 and earlier; Home Server Security 2009; Protection Service for...