Vulnerability-Lookup

CERTA-2004-AVI-112

Vulnerability from certfr_avis - Published: - Updated:

Une vulnérabilité a été découverte dans F-Secure BackWeb.

Description

BackWeb est un module disponible dans les produits F-Secure, permettant d'effectuer des mises à jour de manière automatique. Une vulnérabilité dans la mise en œuvre de BackWeb permet à un utilisateur local d'obtenir les privilèges de l'utilisateur SYSTEM.

Solution

Appliquer le correctif fourni par F-Secure :

ftp://ftp.f-secure.com/support/hotfix/fsbw/bw_631_hotfix.jar

None

Impacted products

Vendor	Product	Description
Microsoft	N/A	F-Secure Internet Gatekeeper 6.x ;
Microsoft	N/A	F-Secure Anti-Virus for Workstations 5.x ;
Microsoft	N/A	F-Secure Policy Manager 5.x.
Microsoft	N/A	F-Secure BackWeb 6.x ;
N/A	N/A	F-Secure Anti-Virus 5.x ;
Microsoft	N/A	F-Secure Anti-Virus for Microsoft Exchange 6.x ;
N/A	N/A	F-Secure Anti-Virus for File Servers 5.x ;
Microsoft	N/A	F-Secure Anti-Virus for Firewalls 6.x ;

References

Title

Publication Time

Tags

Avis de sécurité SA11301 de secunia

None

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "F-Secure Internet Gatekeeper 6.x ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "F-Secure Anti-Virus for Workstations 5.x ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "F-Secure Policy Manager 5.x.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "F-Secure BackWeb 6.x ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "F-Secure Anti-Virus 5.x ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "F-Secure Anti-Virus for Microsoft Exchange 6.x ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "F-Secure Anti-Virus for File Servers 5.x ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "F-Secure Anti-Virus for Firewalls 6.x ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nBackWeb est un module disponible dans les produits F-Secure, permettant\nd\u0027effectuer des mises \u00e0 jour de mani\u00e8re automatique. Une vuln\u00e9rabilit\u00e9\ndans la mise en \u0153uvre de BackWeb permet \u00e0 un utilisateur local d\u0027obtenir\nles privil\u00e8ges de l\u0027utilisateur `SYSTEM`.\n\n## Solution\n\nAppliquer le correctif fourni par F-Secure :\n\n    ftp://ftp.f-secure.com/support/hotfix/fsbw/bw_631_hotfix.jar\n",
  "cves": [],
  "links": [],
  "reference": "CERTA-2004-AVI-112",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2004-04-08T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans F-Secure BackWeb.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans F-Secure BackWeb",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Avis de s\u00e9curit\u00e9 SA11301 de secunia",
      "url": "http://secunia.com/advisories/11301"
    }
  ]
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted