PT-2004-3003 · Finjan · Finjan Surfingate

Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-2107

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Finjan SurfinGate versions 6.0 through 7.0

Description The issue allows remote attackers to exploit the lack of authentication for FHTTP commands on TCP port 3141 when running in proxy mode. This can be used to (1) restart the service, (2) view log information using the getlastmsg command, or (3) force a policy update from the database server using the online command, by utilizing the finjan-parameter-type header.

Recommendations For Finjan SurfinGate versions 6.0 through 7.0, consider restricting access to TCP port 3141 to prevent remote exploitation, and ensure proper authentication mechanisms are in place for FHTTP commands. As a temporary workaround, consider disabling the use of the finjan-parameter-type header in the proxy mode until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2004-2107

Affected Products

Finjan Surfingate

References · 8

• 🔥 http://securityfocus.com/bid/9478 · Exploit
• 🔥 http://secunia.com/advisories/10714 · Exploit
• 🔥 https://exploit-db.com/exploits/23585 · Exploit
• 🔥 http://archives.neohapsis.com/archives/fulldisclosure/2004-01/0929.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-2107 · Security Note
• http://marc.info/?l=bugtraq&m=107522480913629&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14934 · Note
• http://marc.info/?l=bugtraq&m=107487999406339&w=2 · Note