多款F-Secure产品SQL注入漏洞 CVE-2013-7369 CNNVD-201404-373

7.5 AV AC AU C I A
发布: 2014-04-18
修订: 2014-04-21

F-Secure Anti-Virus、F-Secure Email and Server Security和F-Secure Server Security都是芬兰F-Secure公司的安全产品。F-Secure Anti-Virus是一套杀毒软件;F-Secure Email and Server Security和F-Secure Server Security分别对电子邮件和文件服务器提供防病毒和恶意软件防护功能。 多款F-Secure产品的FSDBCom ActiveX控件中的DLL文件存在SQL注入漏洞。远程攻击者可利用该漏洞执行任意SQL命令。以下产品及版本受到影响:F-Secure Anti-Virus for Microsoft Exchange Server 9.00和9.10版本,Anti-Virus for Windows Servers 9.00版本,Anti-Virus for Citrix Servers 9.00版本,F-Secure Email and Server Security 9.20版本,F-Secure Server Security 9.20版本,Solutions based on F-Secure Protection Service for Business Email and Server Security 9.20版本,Solutions based on F-Secure Protection Service for Business Server Security 9.20版本。

0%
暂无可用Exp或PoC
当前有6条受影响产品信息