QwikSec

Security Database

CVE

CWE

Training

CVE-2007-4043

Published: Jul 27, 2007

Modified: Apr 3, 2025

PUBLISHED

Description

file.cgi in Secure Computing SecurityReporter (aka Network Security Analyzer) before 4.6.3 allows remote attackers to bypass authentication via a name parameter ending with a "%00.gif" sequence. NOTE: a separate traversal vulnerability could be leveraged to download arbitrary files.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://www.oliverkarow.de/research/securityreporter.txt

x_refsource_MISC

20070720 Secure Computing - Security Reporter Auth Bypass and Directory Traversal Vulnerability

mailing-list

x_refsource_BUGTRAQ

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.