Skip to content

CVE-2007-4043 file.cgi in Secure Computing SecurityReporter (aka Network Security Analyzer) before 4.6.3 allows remote attackers to bypass authentication via a name parameter ending with a "%00.gif" sequence. NOTE:...

MediumCVSS 5.0 EPSS 1.6%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

file.cgi in Secure Computing SecurityReporter (aka Network Security Analyzer) before 4.6.3 allows remote attackers to bypass authentication via a name parameter ending with a "%00.gif" sequence. NOTE: a separate traversal vulnerability could be leveraged to download arbitrary files.

Affected products

ProductAffected versionsFixed in
securecomputing securityreporter <= 4.6.3 No fix listed

References