F-Secure Multiple Products Web Console Pre-authentication Overflow RCE

High Nessus Plugin ID 21644


An antivirus application installed on the remote host is affected by a remote code execution vulnerability.


The version of F-Secure Internet Gatekeeper and/or F-Secure Anti-Virus for Microsoft Exchange installed on the remote host is affected by a buffer overflow condition in its web console. An unauthenticated, remote attacker can exploit this to cause a denial of service condition or the execution of arbitrary code.

Note that the web console by default accepts connections only from the local host; therefore, this issue can be exploited remotely only if the web console has been specifically configured to accept connections remotely.


Apply the appropriate hotfix as described in the vendor advisory.

See Also


Plugin Details

Severity: High

ID: 21644

File Name: fsecure_web_console_overflow.nasl

Version: $Revision: 1.16 $

Type: local

Agent: windows

Family: Windows

Published: 2006/06/06

Modified: 2016/12/08

Dependencies: 13855

Risk Information

Risk Factor: High


Base Score: 7.6

Temporal Score: 5.6

Vector: CVSS2#AV:N/AC:H/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:U/RL:OF/RC:C


Base Score: 8.1

Temporal Score: 7.1

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:f-secure:f-secure_anti-virus, cpe:/a:f-secure:internet_gatekeeper

Required KB Items: SMB/name, SMB/login, SMB/password, SMB/registry_full_access, SMB/transport

Exploit Available: false

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 2006/06/01

Reference Information

CVE: CVE-2006-2838

BID: 18201

OSVDB: 25937