PT-2007-5397 · Guidance · Encase Enterprise Edition

Published 2007-08-08 · Updated 2018-10-15 · CVE-2007-4202

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Guidance Software EnCase Enterprise Edition (EEE) version 6

Description The issue is related to improper verification of the acquisition target's identity during communication with the EnCase Servlet, which could allow remote attackers to spoof the disk image.

Recommendations For version 6, update the software to a version that properly verifies the identity of the acquisition target to prevent spoofing attacks.

Fix

Related Identifiers

CVE-2007-4202

Affected Products

Encase Enterprise Edition

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2007-4202 · Security Note
• http://securityfocus.com/archive/1/474809/100/0/threaded · Note
• http://kb.cert.org/vuls/id/912593 · Note
• http://isecpartners.com/files/iSEC-Breaking_Forensics_Software-Paper.v1_1.BH2007.pdf · Note
• http://securityfocus.com/archive/1/475335/100/0/threaded · Note