Unscored severity · published Feb 18, 2011
CVE-2011-0453
F-Secure Internet Gatekeeper for Linux 3.x before 3.03 does not require authentication for reading access logs, which allows remote attackers to obtain potentially sensitive…
–
CVSS
2.3%
EPSS
No
On KEV
Description
F-Secure Internet Gatekeeper for Linux 3.x before 3.03 does not require authentication for reading access logs, which allows remote attackers to obtain potentially sensitive information via a TCP session on the admin UI port.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IG
Internet Gatekeeper · F-secure
3.02.1221 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-0453
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-0453
Patch
http://jvn.jp/en/jp/JVN71542734/index.html
Patch
http://jvndb.jvn.jp/jvndb/JVNDB-2011-000013
osvdb.org
http://osvdb.org/70898
Vendor Advisory
http://secunia.com/advisories/43326
Patch
http://www.f-secure.com/en_EMEA/support/security-advisory/fsc-2011-1.html
Vendor Advisory
http://www.vupen.com/english/advisories/2011/0393
More from Internet Gatekeeper
8.8
CVE-2021-33601
A vulnerability was discovered in the web user interface of F-Secure Internet Gatekeeper
7.5
CVE-2022-28887
Multiple Denial of Service Vulnerability
7.5
CVE-2022-28884
A Denial-of-Service vulnerability was discovered in the F-Secure and WithSecure products where aerdl.dll may go into an infinite loop when unpacking PE files
7.5
CVE-2022-28883
A Denial-of-Service (DoS) vulnerability was discovered in F-Secure & WithSecure products whereby the aerdl unpack function crashes
7.5
CVE-2022-28882
A Denial-of-Service (DoS) vulnerability was discovered in F-Secure & WithSecure products whereby the aegen.dll will go into an infinite loop when unpacking PE files