CVE

Id
10533  
CVE No.
CVE-2004-2107  
Status
Candidate  
Description
Finjan SurfinGate 6.0 and 7.0, when running in proxy mode, does not authenticate FHTTP commands on TCP port 3141, which allows remote attackers to use the finjan-parameter-type header to (1) restart the service, (2) use the getlastmsg command to view log information, or (3) use the online command to force a policy update from the database server.  
Phase
Assigned (20050527)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
73243 10533 CVE-2004-2107 BUGTRAQ:20040123 Finjan SurfinGate Vulnerability  View
73244 10533 CVE-2004-2107 URL:http://marc.info/?l=bugtraq&m=107487999406339&w=2  View
73245 10533 CVE-2004-2107 BUGTRAQ:20040126 RE: Finjan SurfinGate Vulnerability  View
73246 10533 CVE-2004-2107 URL:http://marc.info/?l=bugtraq&m=107522480913629&w=2  View
73247 10533 CVE-2004-2107 FULLDISC:20040123 Finjan SurfinGate Vulnerability  View
73248 10533 CVE-2004-2107 URL:http://archives.neohapsis.com/archives/fulldisclosure/2004-01/0929.html  View
73249 10533 CVE-2004-2107 SECUNIA:10714  View
73250 10533 CVE-2004-2107 URL:http://secunia.com/advisories/10714  View
73251 10533 CVE-2004-2107 BID:9478  View
73252 10533 CVE-2004-2107 URL:http://www.securityfocus.com/bid/9478  View
73253 10533 CVE-2004-2107 XF:finjan-surfingate-execute-commands(14934)  View

Related JVN