Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown

CVE-2005-1994

Disclosure Date: June 14, 2005 (last updated February 22, 2025)
Finjan SurfinGate 7.0SP2 and SP3 allows remote attackers to download blocked files via hex-encoded characters in a filename, as demonstrated using "%2e".
0
0
Attacker Value
Unknown

CVE-2004-2107

Disclosure Date: December 31, 2004 (last updated February 22, 2025)
Finjan SurfinGate 6.0 and 7.0, when running in proxy mode, does not authenticate FHTTP commands on TCP port 3141, which allows remote attackers to use the finjan-parameter-type header to (1) restart the service, (2) use the getlastmsg command to view log information, or (3) use the online command to force a policy update from the database server.
0
0
Attacker Value
Unknown

CVE-2002-1961

Disclosure Date: December 31, 2002 (last updated February 22, 2025)
Finjan Software SurfinGate 6.0 and 6.0 1 allows remote attackers to bypass URL access restrictions via a URL whose hostname portion uses a fully qualified domain name (FQDN) that ends in a "." (dot).
0
0
Attacker Value
Unknown

CVE-2002-1962

Disclosure Date: December 31, 2002 (last updated February 22, 2025)
Finjan Software SurfinGate 6.0 and 6.0 1 allows remote attackers to bypass URL access restrictions via a URL with an IP address instead of a hostname.
0
0