Test ID:	1.3.6.1.4.1.25623.1.0.800358
Category:	Buffer overflow
Title:	F-Secure Products Integer Overflow Vulnerability (Oct 2008) - Linux
Summary:	F-Secure Product(s) is prone to an integer overflow vulnerability.
Description:	Summary: F-Secure Product(s) is prone to an integer overflow vulnerability. Vulnerability Insight: The vulnerability is due to an integer overflow error while scanning contents of specially crafted RPM files inside the archives. Vulnerability Impact: Successful exploitation could allow remote attackers to craft the archive files with arbitrary codes and can cause integer overflow in the context of an affected application. Affected Software/OS: F-Secure Linux Security 7.01 and prior F-Secure Anti-Virus Linux Client/Server Security 5.54 and prior F-Secure Internet Gatekeeper for Linux 2.16 and prior on Linux. Solution: Apply the update from the referenced advisory. CVSS Score: 7.6 CVSS Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2008-6085 BugTraq ID: 31846 http://www.securityfocus.com/bid/31846 http://www.securitytracker.com/id?1021073 http://secunia.com/advisories/32352 http://www.vupen.com/english/advisories/2008/2874 XForce ISS Database: fsecure-multipleproducts-rpm-bo(46016) https://exchange.xforce.ibmcloud.com/vulnerabilities/46016
Copyright	Copyright (C) 2009 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.