F-Secure Content Scanner Server Remote Denial of Service Vulnerability
BID:11145
Info
F-Secure Content Scanner Server Remote Denial of Service Vulnerability
| Bugtraq ID: | 11145 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2004-0830 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 09 2004 12:00AM |
| Updated: | Jul 12 2009 07:06AM |
| Credit: | Discovery is credited to an anonymous source. |
| Vulnerable: |
F-Secure Internet Gatekeeper 6.32 F-Secure Internet Gatekeeper 6.31 F-Secure Internet Gatekeeper 6.3 F-Secure Content Scanner Server 6.31 F-Secure Anti-Virus for MS Exchange 6.21 F-Secure Anti-Virus for MS Exchange 6.2 F-Secure Anti-Virus for MS Exchange 6.0 1 |
| Not Vulnerable: |
F-Secure Internet Gatekeeper 6.40 0 F-Secure Anti-Virus for MS Exchange 6.3 0 |
Discussion
F-Secure Content Scanner Server Remote Denial of Service Vulnerability
F-Secure Content Scanner Server is reported prone to a remote denial of service vulnerability. This issue presents itself when the application handles certain malformed packets. This vulnerability causes an unhandled exception in the process leading to a crash in the process.
F-Secure Anti-Virus for Microsoft Exchange and F-Secure Internet Gatekeeper are vulnerable to this issue.
F-Secure Content Scanner Server is reported prone to a remote denial of service vulnerability. This issue presents itself when the application handles certain malformed packets. This vulnerability causes an unhandled exception in the process leading to a crash in the process.
F-Secure Anti-Virus for Microsoft Exchange and F-Secure Internet Gatekeeper are vulnerable to this issue.
Exploit / POC
F-Secure Content Scanner Server Remote Denial of Service Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
F-Secure Content Scanner Server Remote Denial of Service Vulnerability
Solution:
F-Secure has released updates and fixes to address this issue:
F-Secure Anti-Virus for MS Exchange 6.0 1
F-Secure Anti-Virus for MS Exchange 6.2
F-Secure Anti-Virus for MS Exchange 6.21
F-Secure Internet Gatekeeper 6.3
F-Secure Content Scanner Server 6.31
F-Secure Internet Gatekeeper 6.31
F-Secure Internet Gatekeeper 6.32
Solution:
F-Secure has released updates and fixes to address this issue:
F-Secure Anti-Virus for MS Exchange 6.0 1
-
F-Secure CSS6.31 HF4
ftp://ftp.f-secure.com/support/hotfix/fsav-mse/fscss631-04.fsfix
F-Secure Anti-Virus for MS Exchange 6.2
-
F-Secure F-Secure Anti-Virus for Microsoft Exchange 6.30
http://www.f-secure.com/anti-virus/webclub/mseupdate.shtml
F-Secure Anti-Virus for MS Exchange 6.21
-
F-Secure F-Secure Anti-Virus for Microsoft Exchange 6.30
http://www.f-secure.com/anti-virus/webclub/mseupdate.shtml
F-Secure Internet Gatekeeper 6.3
-
F-Secure F-Secure Internet Gatekeeper 6.40
http://www.f-secure.com/anti-virus/webclub/fsigk.shtml
F-Secure Content Scanner Server 6.31
-
F-Secure Hotfix for the F-Secure Content Scanner Server 6.31
ftp://ftp.f-secure.com/support/hotfix/fsav-mse/fscss631-04.fsfix
F-Secure Internet Gatekeeper 6.31
-
F-Secure F-Secure Internet Gatekeeper 6.40
http://www.f-secure.com/anti-virus/webclub/fsigk.shtml
F-Secure Internet Gatekeeper 6.32
-
F-Secure F-Secure Internet Gatekeeper 6.40
http://www.f-secure.com/anti-virus/webclub/fsigk.shtml
References
F-Secure Content Scanner Server Remote Denial of Service Vulnerability
References:
References: