Directory traversal vulnerability in F-Secure Anti-Virus for Microsoft Exchange 6.40 and Internet Gatekeeper 6.40 to 6.42 allows limited remote attackers to bypass Web Console authentication and read files.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| F-secure_anti-virus | F-secure | 6.40 (including) | 6.40 (including) |
| Internet_gatekeeper | F-secure | 6.4 (including) | 6.4 (including) |
| Internet_gatekeeper | F-secure | 6.41 (including) | 6.41 (including) |
| Internet_gatekeeper | F-secure | 6.42 (including) | 6.42 (including) |
References
- http://secunia.com/advisories/17361
- http://securitytracker.com/id?1015142
- http://securitytracker.com/id?1015143
- http://www.f-secure.com/security/fsc-2005-2.shtml
- http://www.securityfocus.com/bid/15284
- http://www.vupen.com/english/advisories/2005/2277
- http://secunia.com/advisories/17361
- http://securitytracker.com/id?1015142
- http://securitytracker.com/id?1015143
- http://www.f-secure.com/security/fsc-2005-2.shtml
- http://www.securityfocus.com/bid/15284
- http://www.vupen.com/english/advisories/2005/2277