780 matches found
CVE-2006-0338
The CVE-2006-0338 entry applies to multiple F-Secure Anti-Virus products on Windows and Linux (Windows Servers 5.52 and earlier; Internet Security 2004–2006; Linux Servers 4.64 and earlier). The vulnerability stems from how ZIP and RAR archives are handled, with malformed archives not being scann...
CVE-2006-0338
Multiple F-Secure Anti-Virus products and versions for Windows and Linux, including Anti-Virus for Windows Servers 5.52 and earlier, Internet Security 2004, 2005 and 2006, and Anti-Virus for Linux Servers 4.64 and earlier, allow remote attackers to hide arbitrary files and data via malformed 1 RA...
CVE-2006-0337
Buffer overflow in multiple F-Secure Anti-Virus products and versions for Windows and Linux, including Anti-Virus for Windows Servers 5.52 and earlier, Internet Security 2004, 2005 and 2006, and Anti-Virus for Linux Servers 4.64 and earlier, allows remote attackers to execute arbitrary code via...
[SA18529] F-Secure Anti-Virus Archive Handling Vulnerabilities
TITLE: F-Secure Anti-Virus Archive Handling Vulnerabilities SECUNIA ADVISORY ID: SA18529 VERIFY ADVISORY: http://secunia.com/advisories/18529/ CRITICAL: Highly critical IMPACT: Security Bypass, System access WHERE: From remote SOFTWARE: F-Secure Personal Express 6.x http://secunia.com/product/688...
F-Secure Antivirus buffer overflow
Buffer overflow on ZIP archives parsing...
Is this a new exploit?
Warning the following URL successfully exploited a fully patched windows xp system with a freshly updated norton anti virus. unionseek.com/d/t1/wmfexp.htm The url runs a .wmf and executes the virus, f-secure will pick up the virus norton will not...
[Full-disclosure] Someone wasted a nice bug on spyware...
In reference to: http://www.securityfocus.com/archive/1/420288/30/0/threaded I ported the exploit to the Metasploit Framework in case anyone wants to test it without installing a thousand spyware apps... Available from 'msfupdate' for MSF users, or in the 2.5 snapshot:...
CVE-2005-3664
The CVE-2005-3664 entry describes a heap-based buffer overflow in the Kaspersky Anti-Virus Engine, used by Kaspersky Personal 5.0.227, Anti-Virus On-Demand Scanner for Linux 5.0.5, and F-Secure Anti-Virus for Linux 4.50, allowing remote code execution via a crafted CHM file. The provided referenc...
CVE-2005-3664
Heap-based buffer overflow in Kaspersky Anti-Virus Engine, as used in Kaspersky Personal 5.0.227, Anti-Virus On-Demand Scanner for Linux 5.0.5, and F-Secure Anti-Virus for Linux 4.50 allows remote attackers to execute arbitrary code via a crafted CHM file...
CVE-2005-3546
suid.cgi scripts in F-Secure 1 Internet Gatekeeper for Linux before 2.15.484 and 2 Anti-Virus Linux Gateway before 2.16 are installed SUID with world-executable permissions, which allows local users to gain privilege...
CVE-2005-3546
The CVE-2005-3546 entry concerns F-Secure products: Internet Gatekeeper for Linux prior to 2.15.484 and Anti-Virus Linux Gateway prior to 2.16. The issue arises from SUID scripts (suid.cgi) being installed with world-executable permissions, enabling local users to gain privilege. The root cause i...
CVE-2005-3546
suid.cgi scripts in F-Secure 1 Internet Gatekeeper for Linux before 2.15.484 and 2 Anti-Virus Linux Gateway before 2.16 are installed SUID with world-executable permissions, which allows local users to gain privilege...
fsigk_exp.py.txt
!/usr/bin/env python fsigkexp.py: F-Secure Internet Gatekeeper for Linux local root exploit acknowledgements: everyone in pure-elite and uDc. coded by: [email protected] http://xavsec.blogspot.com Make proper checks and import nessesary calls from modules. try: from sys import argv except...
F-Secure Internet Gatekeeper antivirus privilege escalation
Different scripts execute external application by relative path...
[EXPL] F-Secure Internet Gatekeeper Local Root (Exploit)
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
F-Secure Internet GateKeeper for Linux < 2.15.484 / Gateway < 2.16 - Local Privilege Escalation
!/usr/bin/env python F-Secure Anti-Virus Internet Gatekeeper for Linux " lastedit = "Thu Sep 22 23:18:39 EDT 2005" usage = """usage: %s -options options: --version show program's version number and exit. -h, --help show this help message and exit. -s, --suid file location to suid. -d,...
F-Secure Internet Gatekeeper for linux < 2.15.484 Local Root Exploit
No description provided by source. !/usr/bin/env python F-Secure Anti-Virus Internet Gatekeeper for Linux 2.15.484 F-Secure Anti-Virus Linux Gateway 2.16 added line 3-4 for references /str0ke fsigkexp.py: F-Secure Internet Gatekeeper for Linux local root exploit acknowledgements: everyone in...
F-Secure Internet GateKeeper for Linux 2.15.484 Gateway 2.16 - Local Privilege Escalation
F-Secure Internet GateKeeper for Linux 2.15.484 Gateway 2.16 - Local Privilege Escalation !/usr/bin/env python F-Secure Anti-Virus Internet Gatekeeper for Linux " lastedit = "Thu Sep 22 23:18:39 EDT 2005" usage = """usage: %s -options options: --version show program's version number and exit...
F-Secure Internet Gatekeeper for linux < 2.15.484 Local Root Exploit
Exploit for linux platform in category local exploits ==================================================================== F-Secure Internet Gatekeeper for linux 2.15.484 Local Root Exploit ==================================================================== !/usr/bin/env python F-Secure Anti-Vir...
CVE-2005-3468
Directory traversal vulnerability in F-Secure Anti-Virus for Microsoft Exchange 6.40 and Internet Gatekeeper 6.40 to 6.42 allows limited remote attackers to bypass Web Console authentication and read files...