CVE-2006-3490

F-Secure Anti-Virus 2003 through 2006 and other versions, Internet Security 2003 through 2006, and Service Platform for Service Providers 6.x and earlier does not scan files contained on removable media when "Scan network drives" is disabled, which allows remote attackers to bypass anti-virus...

CVE-2006-3489

F-Secure Anti-Virus 2003 through 2006 and other versions, Internet Security 2003 through 2006, and Service Platform for Service Providers 6.x and earlier allows remote attackers to bypass anti-virus scanning via a crafted filename...

CVE-2006-3490

CVE-2006-3490 affects F-Secure Anti-Virus 2003–2006, Internet Security 2003–2006, and Service Platform for Service Providers 6.x and earlier. The issue is that the products do not scan files on removable media when the option “Scan network drives” is disabled, which can allow remote attackers to ...

CVE-2006-3489

CVE-2006-3489 affects F-Secure products: Anti-Virus 2003–2006, Internet Security 2003–2006, and Service Platform for Service Providers 6.x and earlier. The vulnerability allows remote attackers to bypass anti-virus scanning by using a crafted filename. The available sources confirm the affected p...

CVE-2006-3489: Undefined Security Weakness

F-Secure Anti-Virus 2003 through 2006 and other versions, Internet Security 2003 through 2006, and Service Platform for Service Providers 6.x and earlier allows remote attackers to bypass anti-virus scanning via a crafted filename...

CVE-2006-3490: Undefined Security Weakness

F-Secure Anti-Virus 2003 through 2006 and other versions, Internet Security 2003 through 2006, and Service Platform for Service Providers 6.x and earlier does not scan files contained on removable media when "Scan network drives" is disabled, which allows remote attackers to bypass anti-virus...

F-Secure Scan Evasion

Binary data 3675.prm...

F-Secure Product Detection (UDP)

Binary data 3676.prm...

Buffer overflow

Buffer overflow in the web console in F-Secure Anti-Virus for Microsoft Exchange 6.40, and Internet Gatekeeper 6.40 through 6.42 and 6.50 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unknown attack vectors. NOTE: By default, the connections ar...

CVE-2006-2838

Buffer overflow in the web console in F-Secure Anti-Virus for Microsoft Exchange 6.40, and Internet Gatekeeper 6.40 through 6.42 and 6.50 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unknown attack vectors. NOTE: By default, the connections ar...

CVE-2006-2838

CVE-2006-2838 affects F-Secure products with a buffer overflow in the Web Console of multiple components, specifically F-Secure Anti-Virus for Microsoft Exchange 6.40 and Internet Gatekeeper 6.40–6.42, and 6.50. The vulnerability allows an unauthenticated, remote attacker to cause a denial of ser...

CVE-2006-2838

Buffer overflow in the web console in F-Secure Anti-Virus for Microsoft Exchange 6.40, and Internet Gatekeeper 6.40 through 6.42 and 6.50 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unknown attack vectors. NOTE: By default, the connections ar...

CVE-2006-2838: Undefined Security Weakness

Buffer overflow in the web console in F-Secure Anti-Virus for Microsoft Exchange 6.40, and Internet Gatekeeper 6.40 through 6.42 and 6.50 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unknown attack vectors. NOTE: By default, the connections ar...

F-Secure Multiple Products Web Console Pre-authentication Overflow RCE

The version of F-Secure Internet Gatekeeper and/or F-Secure Anti-Virus for Microsoft Exchange installed on the remote host is affected by a buffer overflow condition in its web console. An unauthenticated, remote attacker can exploit this to cause a denial of service condition or the execution of...

F-Secure antiviruses Web console buffer overflow

No description provided...

[SA20407] F-Secure Products Web Console Buffer Overflow Vulnerability

---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...

[SA18843] WRQ Reflection Secure IT SFTP Format String Vulnerability

TITLE: WRQ Reflection Secure IT SFTP Format String Vulnerability SECUNIA ADVISORY ID: SA18843 VERIFY ADVISORY: http://secunia.com/advisories/18843/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: WRQ Reflection for Secure IT UNIX Server 6.x...

CVE-2006-0705

CVE-2006-0705 is a format-string vulnerability in SFTP/SSH logging code across multiple servers (e.g., SSH Secure Shell Server variants, and related SFTP servers). The flaw affects the handling of filenames in logs, enabling a remote authenticated user to potentially execute arbitrary commands vi...

CVE-2006-0705: Use of Externally-Controlled Format String

Format string vulnerability in a logging function as used by various SFTP servers, including 1 AttachmateWRQ Reflection for Secure IT UNIX Server before 6.0.0.9, 2 Reflection for Secure IT Windows Server before 6.0 build 38, 3 F-Secure SSH Server for Windows before 5.3 build 35, 4 F-Secure SSH...

Multiple vendor SFTP logging format string vulnerability

Overview A logging function used by multiple vendors' SFTP servers contains a format string vulnerability, which may allow an authorized remote attacker to execute arbitrary code or cause a denial of service. Description SFTP SFTP Secure FTP is a file transfer application that uses SSH for...