CVE-2004-2276

F-Secure Anti-Virus 5.41 and 5.42 on Windows, Client Security 5.50 and 5.52, 4.60 for Samba Servers, and 4.52 and earlier for Linux does not properly detect certain viruses in a PKZip archive, which allows viruses such as Sober.D and Sober.G to bypass initial detection...

CVE-2004-2220

F-Secure Anti-Virus for Microsoft Exchange 6.30 and 6.31 does not properly detect certain password-protected files in a ZIP file, which allows remote attackers to bypass anti-virus protection...

CVE-2004-2220

CVE-2004-2220 affects F-Secure Anti-Virus for Microsoft Exchange 6.30 and 6.31. The vulnerability is that the product does not reliably detect certain password-protected ZIP files, allowing remote attackers to bypass antivirus protection. Affected component: ZIP/password-protected archive scannin...

CVE-2005-0350

Heap-based buffer overflow in multiple F-Secure Anti-Virus and Internet Security products allows remote attackers to execute arbitrary code via a crafted ARJ archive...

CVE-2004-1762

Technical details for CVE-2004-1762 are not publicly available in the provided documents; no affected products, versions, or fixes are specified here. Monitor for updates as more information may emerge.

CVE-2004-1762

Unknown vulnerability in F-Secure Anti-Virus FSAV 4.52 for Linux before Hotfix 3 allows the Sober.D worm to bypass FASV...

CVE-2005-0350

Heap-based buffer overflow in multiple F-Secure Anti-Virus and Internet Security products allows remote attackers to execute arbitrary code via a crafted ARJ archive...

CVE-2005-0350

CVE-2005-0350 describes a heap-based buffer overflow in multiple F-Secure Anti-Virus and Internet Security products. The vulnerability allows a remote attacker to execute arbitrary code by sending a crafted ARJ archive. The CVSS metrics indicate a network-exposed, low-attack-complexity issue with...

Multiple F-Secure antiviral programs ARJ archives buffer overflow

Buffer overflow on ARH files handling...

[SA14216] F-Secure Multiple Products ARJ Archive Handling Vulnerability

TITLE: F-Secure Multiple Products ARJ Archive Handling Vulnerability SECUNIA ADVISORY ID: SA14216 VERIFY ADVISORY: http://secunia.com/advisories/14216/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: F-Secure Anti-Virus 2004 http://secunia.com/product/3500/ F-Secure...

CVE-2004-1223

The Management Agent in F-Secure Policy Manager 5.11.2810 allows remote attackers to gain sensitive information, such as the absolute path for the web server, via an HTTP request to fsmsh.dll without any parameters...

CVE-2004-1762

Unknown vulnerability in F-Secure Anti-Virus FSAV 4.52 for Linux before Hotfix 3 allows the Sober.D worm to bypass FASV...

CVE-2004-2276

F-Secure Anti-Virus 5.41 and 5.42 on Windows, Client Security 5.50 and 5.52, 4.60 for Samba Servers, and 4.52 and earlier for Linux does not properly detect certain viruses in a PKZip archive, which allows viruses such as Sober.D and Sober.G to bypass initial detection...

CVE-2004-2405

Buffer overflow in multiple F-Secure Anti-Virus products, including F-Secure Anti-Virus 5.42 and earlier, allows remote attackers to bypass scanning or cause a denial of service crash or module restart, depending on the product, via a malformed LHA archive...

CVE-2004-2220

F-Secure Anti-Virus for Microsoft Exchange 6.30 and 6.31 does not properly detect certain password-protected files in a ZIP file, which allows remote attackers to bypass anti-virus protection...

CVE-2004-2442

Multiple interpretation error in various F-Secure Anti-Virus products, including Workstation 5.43 and earlier, Windows Servers 5.50 and earlier, MIMEsweeper 5.50 and earlier, Anti-Virus for Linux Servers and Gateways 4.61 and earlier, and other products, allows remote attackers to bypass antiviru...

CVE-2004-1223

The Management Agent in F-Secure Policy Manager 5.11.2810 allows remote attackers to gain sensitive information, such as the absolute path for the web server, via an HTTP request to fsmsh.dll without any parameters...

CVE-2004-1223

The CVE-2004-1223 entry refers to a path-disclosure issue in F-Secure Policy Manager. The affected component is the Management Agent’s web interface (fsmsh.dll) used by Policy Manager 5.11.2810, where an HTTP request without parameters can reveal sensitive information such as the web server’s abs...

F-Secure Policy Manager Path Disclosure

The remote host is running F-Secure Policy Manager, a distributed administration software allowing a system administrator to control applications from a single web console. There is a flaw in the file '/fsms/fsmsh.dll' that discloses the physical path this application is under. An attacker could...

F-Secure Policy Manager 5.11 - FSMSH.dll CGI Application Installation Full Path Disclosure

F-Secure Policy Manager 5.11 - FSMSH.dll CGI Application Installation Full Path Disclosure source: https://www.securityfocus.com/bid/11869/info F-Secure Policy Manager includes a CGI application named 'fsmsh.dll'. By supplying unexpected input as an argument to the 'fsmsh.dll' application the...