CVE-2011-0453

Published: Feb 18, 2011Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

F-Secure Internet Gatekeeper for Linux 3.x before 3.03 does not require authentication for reading access logs, which allows remote attackers to obtain potentially sensitive information via a TCP session on the admin UI port.

Affected (1)

Products: F Secure: Internet Gatekeeper

F Secure

1 product

Internet Gatekeeper

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
F Secure Internet Gatekeeper	Version 3.02.1221

Related CWEs

CWE-287

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (12)

http://jvn.jp/en/jp/JVN71542734/index.html

Source: vultures@jpcert.or.jp

Patch

http://jvndb.jvn.jp/jvndb/JVNDB-2011-000013

Source: vultures@jpcert.or.jp

Patch

http://osvdb.org/70898

Source: vultures@jpcert.or.jp

http://secunia.com/advisories/43326

Source: vultures@jpcert.or.jp

Vendor Advisory

http://www.f-secure.com/en_EMEA/support/security-advisory/fsc-2011-1.html

Source: vultures@jpcert.or.jp

PatchVendor Advisory

http://www.vupen.com/english/advisories/2011/0393

Source: vultures@jpcert.or.jp

Vendor Advisory

http://jvn.jp/en/jp/JVN71542734/index.html