Vulnerability Description
SQL injection vulnerability in an unspecified DLL in the FSDBCom ActiveX control in F-Secure Anti-Virus for Microsoft Exchange Server before HF02, Anti-Virus for Windows Servers 9.00 before HF09, Anti-Virus for Citrix Servers 9.00 before HF09, and F-Secure Email and Server Security and F-Secure Server Security 9.20 before HF01 allows remote attackers to execute arbitrary SQL commands via unknown vectors, related to GetCommand.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| F-Secure | Anti-Virus | 9.00 |
| F-Secure | Email And Server Security | 9.20 |
| F-Secure | Server Security | 9.20 |
Related Weaknesses (CWE)
References
- http://www.f-secure.com/en/web/labs_global/fsc-2013-1Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-13-095/
- http://www.f-secure.com/en/web/labs_global/fsc-2013-1Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-13-095/
FAQ
What is CVE-2013-7369?
CVE-2013-7369 is a vulnerability with a CVSS score of 7.5 (HIGH). SQL injection vulnerability in an unspecified DLL in the FSDBCom ActiveX control in F-Secure Anti-Virus for Microsoft Exchange Server before HF02, Anti-Virus for Windows Servers 9.00 before HF09, Anti...
How severe is CVE-2013-7369?
CVE-2013-7369 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2013-7369?
Check the references section above for vendor advisories and patch information. Affected products include: F-Secure Anti-Virus, F-Secure Email And Server Security, F-Secure Server Security.