Secunia

A vulnerability has been reported in F-Secure Anti-Virus Internet Gatekeeper for Linux and F-Secure Anti-Virus Linux Gateway, which can be exploited by malicious, local users to gain escalated privileges.

The vulnerability is caused due to several scripts being installed with the SUID bit set and are world executable. e.g. "/opt/f-secure/fsigk/cgi/*suid.cgi" and "/home/virusgw/cgi/*suid.cgi". These scripts can be exploited by malicious users to gain root privileges.

The vulnerability has been reported in the following versions:
* F-Secure Anti-Virus Internet Gatekeeper for Linux versions prior to 2.15.484.
* F-Secure Anti-Virus Linux Gateway versions prior to 2.16.

Solution
Update to the fixed version or remove SUID bit from affected scripts.
Further details available in Customer Area

Provided and/or discovered by
The vendor credits Tigerteam.se Security.

Changelog
Further details available in Customer Area

Original Advisory
http://www.f-secure.com/security/fsc-2005-3.shtml

Deep Links
Links available in Customer Area