FYI…

F-Secure web console buffer overflow
- http://isc.sans.org/diary.php?storyid=1374
Last Updated: 2006-06-01 15:07:31 UTC
"The folks at F-Secure issued a bulletin today* highlighting a buffer overflow in the web console feature of F-Secure Anti-Virus for Microsoft Exchange and F-Secure Internet Gatekeeper. F-Secure rates this vulnerability as high in the cases where the web console is configured to only allow connections from localhost or specific trusted hosts and critical if configured to allow connections from all hosts. They have released patches…"

* http://www.f-secure.com/security/fsc-2006-3.shtml

Hotfix for F-Secure Anti-Virus for Microsoft Exchange 6.40:
- ftp://ftp.f-secure.com/support/hotfix/fsa…avmse640-05.zip

Hotfix for the F-Secure Internet Gatekeeper 6.50:
- ftp://ftp.f-secure.com/support/hotfix/fsig/fsigk650-01.zip

:ph34r: