CVE-2007-3986: Medium severity Securecomputing Securityreporter vulnerability

Published Jul 25, 2007

Updated

file.cgi in Secure Computing SecurityReporter (aka Network Security Analyzer) 4.6.3 allows remote attackers to bypass authentication via a name parameter that specifies the eventcache directory and a non-GIF file, which causes the $dontvalidate variable to be set to true. NOTE: a separate traversal vulnerability could be leveraged to download arbitrary files.

Affected Software

1 affected component

Securecomputing Securityreporter=4.6.3

Remediation

Patch Available

http://www.securecomputing.com/index.cfm?skey=1429

Event History

Jul 25, 2007

CVE Published

06:30 PM

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-3986?

CVE-2007-3986 has been classified as a medium severity vulnerability, as it allows remote attackers to bypass authentication.

How do I fix CVE-2007-3986?

To fix CVE-2007-3986, update Secure Computing SecurityReporter to the latest version or apply any available patches that address the vulnerability.

What is the impact of CVE-2007-3986 on affected systems?

The impact of CVE-2007-3986 is that it allows unauthorized remote access to sensitive data through authentication bypass.

Which software versions are affected by CVE-2007-3986?

CVE-2007-3986 specifically affects Secure Computing SecurityReporter version 4.6.3.

Can CVE-2007-3986 be exploited remotely?

Yes, CVE-2007-3986 can be exploited remotely by attackers who manipulate the name parameter.