CVE-2005-3546

Description

suid.cgi scripts in F-Secure (1) Internet Gatekeeper for Linux before 2.15.484 and (2) Anti-Virus Linux Gateway before 2.16 are installed SUID with world-executable permissions, which allows local users to gain privilege.

Affected products

• F-Secure / f-secure_anti-virus
• F-Secure / internet_gatekeeper

Exploits & proofs of concept

• exploit-dbF-Secure Internet GateKeeper for Linux < 2.15.484 / Gateway < 2.16 - Local Privilege Escalationby Xavier de Leon

References

• MISChttp://securitytracker.com/id?1015160
• MISChttp://www.osvdb.org/20546
• MISChttp://www.osvdb.org/20543
• MISChttp://www.osvdb.org/20538
• MISChttp://www.osvdb.org/20540
• MISChttp://www.osvdb.org/20549
• VENDOR_ADVISORYhttp://secunia.com/advisories/17467
• MISChttp://www.f-secure.com/security/fsc-2005-3.shtml
• MISChttp://www.osvdb.org/20544
• MISChttp://www.osvdb.org/20547
• VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2005/2331
• MISChttp://www.osvdb.org/20550
• MISChttp://www.osvdb.org/20541
• MISChttp://www.osvdb.org/20551
• MISChttp://www.osvdb.org/20537
• MISChttp://securitytracker.com/id?1015159
• MISChttp://www.osvdb.org/20545
• MISChttp://www.osvdb.org/20513
• MISChttp://www.osvdb.org/20552
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/22966
• MISChttp://www.osvdb.org/20539
• MISChttp://www.osvdb.org/20548
• MISChttp://www.securityfocus.com/bid/15339
• MISChttp://www.osvdb.org/20542