CVE-2006-3489

Severity CVSS v4.0:

Pending analysis

Type:

Unavailable / Other

Publication date:

10/07/2006

Last modified:

03/04/2025

Description

F-Secure Anti-Virus 2003 through 2006 and other versions, Internet Security 2003 through 2006, and Service Platform for Service Providers 6.x and earlier allows remote attackers to bypass anti-virus scanning via a crafted filename.

Impact

Vector 2.0

AV:N/AC:L/Au:N/C:N/I:P/A:N CVSS v2.0 Severity and Metrics:

Base Score: 5.00 MEDIUM
Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

Attack Vector (AV): Network
Attack Complexity (AC): Low
Authentication (Au): None
Confidentiality (C): None
Integrity (I): Physical
Availability (A): None

Base Score 2.0

5.00

Severity 2.0

MEDIUM

Vulnerable products and versions

CPE	From	Up to
cpe:2.3:a:f-secure:f-secure_anti-virus:::workstations:::::*		5.44 (including)
cpe:2.3:a:f-secure:f-secure_anti-virus:::windows_servers:::::*		5.52 (including)
cpe:2.3:a:f-secure:f-secure_anti-virus:::mimesweeper:::::*		5.61 (including)
cpe:2.3:a:f-secure:f-secure_anti-virus:::client_security:::::*		6.01 (including)
cpe:2.3:a:f-secure:f-secure_anti-virus:5.5::citrix_servers:::::
cpe:2.3:a:f-secure:f-secure_anti-virus:5.51::citrix_servers:::::
cpe:2.3:a:f-secure:f-secure_anti-virus:5.52::citrix_servers:::::
cpe:2.3:a:f-secure:f-secure_anti-virus:2003:::::::*
cpe:2.3:a:f-secure:f-secure_anti-virus:2004:::::::*
cpe:2.3:a:f-secure:f-secure_anti-virus:2005:::::::*
cpe:2.3:a:f-secure:f-secure_anti-virus:2006:::::::*
cpe:2.3:a:f-secure:f-secure_internet_security:2003:::::::*
cpe:2.3:a:f-secure:f-secure_internet_security:2004:::::::*
cpe:2.3:a:f-secure:f-secure_internet_security:2005:::::::*
cpe:2.3:a:f-secure:f-secure_internet_security:2006:::::::*

To consult the complete list of CPE names with products and versions, see this page

CPE	From	Up to
cpe:2.3:a:f-secure:f-secure_anti-virus:::workstations:::::*		5.44 (including)
cpe:2.3:a:f-secure:f-secure_anti-virus:::windows_servers:::::*		5.52 (including)
cpe:2.3:a:f-secure:f-secure_anti-virus:::mimesweeper:::::*		5.61 (including)
cpe:2.3:a:f-secure:f-secure_anti-virus:::client_security:::::*		6.01 (including)
cpe:2.3:a:f-secure:f-secure_anti-virus:5.5::citrix_servers:::::
cpe:2.3:a:f-secure:f-secure_anti-virus:5.51::citrix_servers:::::
cpe:2.3:a:f-secure:f-secure_anti-virus:5.52::citrix_servers:::::
cpe:2.3:a:f-secure:f-secure_anti-virus:2003:::::::*
cpe:2.3:a:f-secure:f-secure_anti-virus:2004:::::::*
cpe:2.3:a:f-secure:f-secure_anti-virus:2005:::::::*
cpe:2.3:a:f-secure:f-secure_anti-virus:2006:::::::*
cpe:2.3:a:f-secure:f-secure_internet_security:2003:::::::*
cpe:2.3:a:f-secure:f-secure_internet_security:2004:::::::*
cpe:2.3:a:f-secure:f-secure_internet_security:2005:::::::*
cpe:2.3:a:f-secure:f-secure_internet_security:2006:::::::*

CVE-2006-3489

Description

Impact

Vulnerable products and versions

References to Advisories, Solutions, and Tools