CVE-2005-3468

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Directory traversal vulnerability in F-Secure Anti-Virus for Microsoft Exchange 6.40 and Internet Gatekeeper 6.40 to 6.42 allows limited remote attackers to bypass Web Console authentication and read files.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/17361Patch, Vendor Advisory
http://securitytracker.com/id?1015142
http://securitytracker.com/id?1015143
http://www.f-secure.com/security/fsc-2005-2.shtmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/15284
http://www.vupen.com/english/advisories/2005/2277
http://secunia.com/advisories/17361Patch, Vendor Advisory
http://securitytracker.com/id?1015142
http://securitytracker.com/id?1015143
http://www.f-secure.com/security/fsc-2005-2.shtmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/15284
http://www.vupen.com/english/advisories/2005/2277

Timeline

Published: Nov 2, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-34697.5SQL injection vulnerability in index.php in News2Net 3.0.0.0 allows remote attackers to execute arbitrary SQL commands via the category para CVE-2005-34707.5SQL injection vulnerability in in the authenticate function in MailWatch for MailScanner 1.0.2 allows remote attackers to execute arbitrary CVE-2005-34715.0Directory traversal vulnerability in the ruleset view for MailWatch for MailScanner 1.0.2 allows remote attackers to access arbitrary files.CVE-2005-34725.0Unspecified vulnerability in Sun Java System Communications Express 2005Q1 and 2004Q2 allows local and remote attackers to read sensitive in CVE-2005-34734.3Multiple cross-site scripting (XSS) vulnerabilities in Simple PHP Blog 0.4.5 and earlier allow remote attackers to inject arbitrary web scri CVE-2005-34744.6The aries.sys driver in Sony First4Internet XCP DRM software hides any file, registry key, or process with a name that starts with "$sys$", CVE-2005-34755.0Hasbani Web Server (WindWeb) 2.0 allows remote attackers to cause a denial of service (infinite loop) via HTTP crafted GET requests.CVE-2005-34762.1Unspecified vulnerability in HP OpenVMS Integrity 8.2-1 and 8.2, and OpenVMS Alpha 7.3-2 and 8.2, allows local users to cause a denial of se CVE-2005-34774.3Multiple interpretation error in the image upload handling code in Invision Gallery 2.0.3 allows remote attackers to conduct cross-site scri CVE-2005-34787.5SQL injection vulnerability in index.php in PHPCafe.net Tutorials Manager 1.0 Beta 2 allows remote attackers to execute arbitrary SQL comman CVE-2005-34794.3Cross-site scripting (XSS) vulnerability in login.asp in Ringtail CaseBook 6.1.0 allows remote attackers to inject arbitrary web script or H CVE-2005-34805.0login.asp in Ringtail CaseBook 6.1.0 displays different error messages depending on whether a user exists or not, which allows remote attack