CVE-2007-4043: Critical severity secure computing securityreporter vulnerability
file.cgi in Secure Computing SecurityReporter (aka Network Security Analyzer) before 4.6.3 allows remote attackers to bypass authentication via a name parameter ending with a "%00.gif" sequence. NOTE: a separate traversal vulnerability could be leveraged to download arbitrary files.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-4043?
CVE-2007-4043 is considered a high severity vulnerability due to its potential for remote authentication bypass.
How do I fix CVE-2007-4043?
To fix CVE-2007-4043, upgrade Secure Computing SecurityReporter to version 4.6.3 or later.
What types of attacks can be executed through CVE-2007-4043?
CVE-2007-4043 allows remote attackers to bypass authentication and possibly download arbitrary files given a separate traversal vulnerability.
Which versions of Secure Computing SecurityReporter are affected by CVE-2007-4043?
CVE-2007-4043 affects all versions of Secure Computing SecurityReporter prior to 4.6.3.
What is the default exploit method for CVE-2007-4043?
The default exploit method for CVE-2007-4043 involves manipulating the name parameter with a "%00.gif" sequence.