Description
F-Secure Internet Gatekeeper for Linux 3.x before 3.03 does not require authentication for reading access logs, which allows remote attackers to obtain potentially sensitive information via a TCP session on the admin UI port.
References
- 43326 third-party-advisory
- http://www.f-secure.com/en_EMEA/support/security-advisory/fsc-2011-1.html
- ADV-2011-0393 vdb-entry
- 70898 vdb-entry
- JVNDB-2011-000013 third-party-advisory
- JVN#71542734 third-party-advisory