Multiple F-Secure products Web Console HTTP request buffer overflow
| fsecure-webconsole-bo (26799) |  High Risk |
Description:
F-Secure Anti-Virus for Microsoft Exchange and F-Secure Internet Gatekeeper are vulnerable to a buffer overflow in the Web Console component. By sending a specially-crafted HTTP request an attacker could overflow a buffer and cause the Web Console service to crash or execute arbitrary commands on the system.
Note: By default, F-Secure Ant-Virus for Microsoft Exchange and F-Secure Internet Gatekeeper are configured to allow connections from the local host only.
Consequences:
Gain Access
Remedy:
Refer to F-Secure Security Bulletin FSC-2006-3 for hotfix or upgrade information. See References.
References:
- F-Secure Security Bulletin FSC-2006-3: Buffer overflow in Web console of F-Secure Anti-Virus for Microsoft Exchange and F-Secure Internet Gatekeeper.
- BID-18201: F-Secure Multiple Products Web Console Buffer Overflow Vulnerability
- CVE-2006-2838: Buffer overflow in the web console in F-Secure Anti-Virus for Microsoft Exchange 6.40, and Internet Gatekeeper 6.40 through 6.42 and 6.50 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown attack vectors. NOTE: By default, the connections are only allowed from the local host.
- SA20407: F-Secure Products Web Console Buffer Overflow Vulnerability
- SECTRACK ID: 1016196: F-Secure Anti-Virus for Microsoft Exchange Buffer Overflow in Web Console May Let Remote Users Execute Arbitrary Code
- SECTRACK ID: 1016197: F-Secure Internet Gatekeeper Buffer Overflow in Web Console May Let Remote Users Execute Arbitrary Code
- VUPEN/ADV-2006-2076: F-Secure Products Web Console Requests Handling Buffer Overflow Vulnerability
Platforms Affected:
- F-Secure Anti-Virus for MS Exchange 6.40
- F-Secure Internet Gatekeeper 6.40
- F-Secure Internet Gatekeeper 6.41
- F-Secure Internet Gatekeeper 6.42
- F-Secure Internet Gatekeeper 6.50
- Microsoft Windows 2003 Server
Reported:
Jun 01, 2006
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net