suid.cgi scripts in F-Secure (1) Internet Gatekeeper for Linux before...
Vulnerability Description
suid.cgi scripts in F-Secure (1) Internet Gatekeeper for Linux before 2.15.484 and (2) Anti-Virus Linux Gateway before 2.16 are installed SUID with world-executable permissions, which allows local users to gain privilege.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2005-3546
Credits & Attribution
No credits recorded in the NVD database.
References
- http://securitytracker.com/id?1015160
- http://www.osvdb.org/20546
- http://www.osvdb.org/20543
- http://www.osvdb.org/20538
- http://www.osvdb.org/20540
- http://www.osvdb.org/20549
- http://secunia.com/advisories/17467
- http://www.f-secure.com/security/fsc-2005-3.shtml
- http://www.osvdb.org/20544
- http://www.osvdb.org/20547
- http://www.vupen.com/english/advisories/2005/2331
- http://www.osvdb.org/20550
- http://www.osvdb.org/20541
- http://www.osvdb.org/20551
- http://www.osvdb.org/20537
- http://securitytracker.com/id?1015159
- http://www.osvdb.org/20545
- http://www.osvdb.org/20513
- http://www.osvdb.org/20552
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22966
- http://www.osvdb.org/20539
- http://www.osvdb.org/20548
- http://www.securityfocus.com/bid/15339
- http://www.osvdb.org/20542
More from f-secure
View All →Affected Vendor
f-secure
View all reports →Affected Software
Timeline
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.