CVE-2006-3490: Medium severity F-Secure F-Secure anti-virus vulnerability
F-Secure Anti-Virus 2003 through 2006 and other versions, Internet Security 2003 through 2006, and Service Platform for Service Providers 6.x and earlier does not scan files contained on removable media when "Scan network drives" is disabled, which allows remote attackers to bypass anti-virus controls.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-3490?
CVE-2006-3490 is considered a medium severity vulnerability due to its potential for allowing attackers to bypass anti-virus controls.
How do I fix CVE-2006-3490?
To fix CVE-2006-3490, enable the 'Scan network drives' option in F-Secure Anti-Virus settings.
Which versions of F-Secure are affected by CVE-2006-3490?
CVE-2006-3490 affects F-Secure Anti-Virus 2003 through 2006, Internet Security 2003 through 2006, and Service Platform for Service Providers 6.x and earlier.
What is the impact of CVE-2006-3490?
The impact of CVE-2006-3490 is that it allows remote attackers to bypass malware scanning on removable media if the scan option is disabled.
How can I confirm if my F-Secure software is vulnerable to CVE-2006-3490?
You can confirm vulnerability to CVE-2006-3490 by checking if you are using F-Secure Anti-Virus versions from 2003 to 2006 or the specified Internet Security versions.