Signature Detail
Short Name |
HTTP:INFO-LEAK:F-SECURE-MANAGER |
|---|---|
Severity |
Low |
Recommended |
No |
Category |
HTTP |
Keywords |
F-Secure Policy Manager information disclosure |
Release Date |
2005/03/10 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: F-Secure Policy Manager information disclosure
This signature detects attempts to obtain information about an F-Secure Policy Manager installation. The web server managing the policy allows unauthenticated users to retrieve information about the software installation.
Extended Description
F-Secure Policy Manager includes a CGI application named 'fsmsh.dll'. By supplying unexpected input as an argument to the 'fsmsh.dll' application the vulnerable software will return an error message that includes the installation path of the software.
Affected Products
- F-Secure Policy Manager 5.11
References
- BugTraq: 11869
- CVE: CVE-2004-1223
- URL: http://www.oliverkarow.de/research/f-secure.txt