NVD

Id
56333  
Name
CVE-2007-4202  
Description
Guidance Software EnCase Enterprise Edition (EEE) 6 does not properly verify the identity of the acquisition target during communication with the EnCase Servlet (EEE servlet), which might allow remote attackers to spoof the disk image.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-08-07  
Modified Date
2008-09-05  
Seq
2007-4202  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
286881 56333 CVE-2007-4202 http://www.isecpartners.com/files/iSEC-Breaking_Forensics_Software-Paper.v1_1.BH2007.pdf  View
286882 56333 CVE-2007-4202 VU#912593  View
286883 56333 CVE-2007-4202 20070726 Re: Guidance Software response to iSEC report on EnCase  View
286884 56333 CVE-2007-4202 20070802 RE: Re: Guidance Software response to iSEC report on EnCase  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
55539 JVNDB-2007-004231 Guidance Software EnCase におけるディスクイメージを偽造される脆弱性 Guidance Software EnCase は、EnCase Servlet (EEE servlet) と通信する間に獲得するターゲットの識別を適切に検証しないため、ディスクイメージを偽造される脆弱性が存在します。 CVE-2007-4202 27557 CVE-2007-4202 56333 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004231.html 2007-08-07 2012-09-25 View