F-Secure issues fix for Internet Gatekeeper heap overflow vulnerability

guest · Feb 5, 2020

F-Secure issues fix for Internet Gatekeeper heap overflow vulnerability
Flaw in antivirus web server creates overflow condition, leading to RCE
February 5, 2020
https://portswigger.net/daily-swig/...ternet-gatekeeper-heap-overflow-vulnerability

A vulnerability found in older versions of an antivirus product made by F-Secure could lead to remote code execution in the corporate networks where it is commonly deployed.

Researchers at Doyensec, a cybersecurity company based in Poland, posted recently (February 3) about the discovery of the bug, which affected the F-Secure Internet Gatekeeper product, versions 5.50 and below.
The issue derived from an overflow condition in the user’s web interface and was classified as ‘critical’ due to the possibility that an attacker could gain access to the Internet Gatekeeper server.
Click to expand...

A patch was published after researchers at Doyensec reported the bug to F-Secure through its Vulnerability Rewards Program, which can pay up to €15,000 ($16,500) depending on the type of bug disclosed.
In the technical blog post, Ken Joensen from Doyensec explained that a coding oversight meant that an attacker could send a malicious HTTP request to the Internet Gatekeeper web server.

The fix has only been issued for version 5.40-5.50 of the Internet Gatekeeper application. F-Secure noted that there had been no evidence of attacks occurring due to the vulnerability.
Click to expand...

Log in or Sign up

F-Secure issues fix for Internet Gatekeeper heap overflow vulnerability

guest Guest

Log in or Sign up

F-Secure issues fix for Internet Gatekeeper heap overflow vulnerability

guest Guest

Useful Searches