PT-2007-5397 · Guidance · Encase Enterprise Edition

Publicado 2007-08-08 · Atualizado 2018-10-15 · CVE-2007-4202

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Guidance Software EnCase Enterprise Edition (EEE) version 6

Description The issue is related to improper verification of the acquisition target's identity during communication with the EnCase Servlet, which could allow remote attackers to spoof the disk image.

Recommendations For version 6, update the software to a version that properly verifies the identity of the acquisition target to prevent spoofing attacks.

Correção

Identificadores relacionados

CVE-2007-4202

Produtos afetados

Encase Enterprise Edition

Referências · 5

• http://securityfocus.com/archive/1/474809/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-4202 · Nota de Segurança
• http://kb.cert.org/vuls/id/912593 · Nota
• http://isecpartners.com/files/iSEC-Breaking_Forensics_Software-Paper.v1_1.BH2007.pdf · Nota
• http://securityfocus.com/archive/1/475335/100/0/threaded · Nota