F-Secure Anti-Virus Gatekeeper and Gateway for Linux Local Privilege Escalation Vulnerability

Bugtraq ID:	15339
Class:	Design Error
CVE:	CVE-2005-3546
Remote:	No
Local:	Yes
Published:	Nov 07 2005 12:00AM
Updated:	Feb 20 2007 09:26PM
Credit:	Tigerteam.se Security reported this issue to the vendor.
Vulnerable:	F-Secure Internet Gatekeeper for Linux F-Secure Anti-Virus for Linux Gateways
Not Vulnerable:	F-Secure Internet Gatekeeper for Linux 2.15.484 F-Secure Anti-Virus for Linux Gateways 2.16

F-Secure Anti-Virus Gatekeeper and Gateway for Linux Local Privilege Escalation Vulnerability

F-Secure Anti-Virus products are prone to a local privilege-escalation vulnerability because of insecure setuid-superuser binary permissions.

Exploiting this vulnerability allows local attackers to gain superuser privileges, leading to a complete compromise of the affected computer.

F-Secure Anti-Virus Gatekeeper and Gateway for Linux Local Privilege Escalation Vulnerability

An exploit is not required.

The following proof of concept (fsigk_exp.py) has been provided by <[email protected]>.

• /data/vulnerabilities/exploits/fsigk_exp.py

F-Secure Anti-Virus Gatekeeper and Gateway for Linux Local Privilege Escalation Vulnerability

Solution:
The vendor has released an advisory along with fixes to address this issue. Please see the referenced advisory for information on obtaining fixes.

F-Secure Anti-Virus Gatekeeper and Gateway for Linux Local Privilege Escalation Vulnerability

References:

• F-Secure Anti-Virus for Linux Product Page (F-Secure)
  
• F-Secure Internet Gatekeeper for Linux Product Page (F-Secure)
  
• F-Secure Security Bulletin FSC-2005-3 Local root vulnerability in F-Secure Inter (F-Secure)