Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2006-3490

F-Secure Anti-Virus 2003 through 2006 and other versions, Internet Security 2003 through 2006, and Service Platform for Service Providers 6.x and earlier does not scan files contained on removable media when "Scan network drives" is disabled, which allows remote attackers to bypass anti-virus controls.

Published

2006-07-10T22:05:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 5.0 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: PARTIAL
  • Availability Impact: NONE
Exploitability Score

10.0

Impact Score

2.9

Weaknesses
  • Type: Primary
    NVD-CWE-Other
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application f-secure f-secure_anti-virus ≤ 5.44 Yes
Application f-secure f-secure_anti-virus ≤ 5.52 Yes
Application f-secure f-secure_anti-virus ≤ 5.61 Yes
Application f-secure f-secure_anti-virus ≤ 6.01 Yes
Application f-secure f-secure_anti-virus 5.5 Yes
Application f-secure f-secure_anti-virus 5.51 Yes
Application f-secure f-secure_anti-virus 5.52 Yes
Application f-secure f-secure_anti-virus 2003 Yes
Application f-secure f-secure_anti-virus 2004 Yes
Application f-secure f-secure_anti-virus 2005 Yes
Application f-secure f-secure_anti-virus 2006 Yes
Application f-secure f-secure_internet_security 2003 Yes
Application f-secure f-secure_internet_security 2004 Yes
Application f-secure f-secure_internet_security 2005 Yes
Application f-secure f-secure_internet_security 2006 Yes
Application f-secure f-secure_service_platform_for_service_providers * Yes
References