First published: Tue Jun 06 2006(Updated: )
Buffer overflow in the web console in F-Secure Anti-Virus for Microsoft Exchange 6.40, and Internet Gatekeeper 6.40 through 6.42 and 6.50 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown attack vectors. NOTE: By default, the connections are only allowed from the local host.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
f-secure f-secure anti-virus | =6.40 | |
F-Secure Internet Gatekeeper for Linux | =6.42 | |
F-Secure Internet Gatekeeper for Linux | =6.41 | |
F-Secure Internet Gatekeeper for Linux | =6.4 | |
F-Secure Internet Gatekeeper for Linux | =6.50 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2006-2838 has a high severity due to its potential for causing denial of service and executing arbitrary code.
To fix CVE-2006-2838, you should update F-Secure Anti-Virus for Microsoft Exchange and Internet Gatekeeper to a version that is not affected.
CVE-2006-2838 affects F-Secure Anti-Virus 6.40 and Internet Gatekeeper versions 6.40 through 6.50.
Yes, CVE-2006-2838 can be exploited remotely, allowing attackers to cause a denial of service.
Yes, CVE-2006-2838 specifically involves a buffer overflow vulnerability in the web console.