Description
Finjan SurfinGate 6.0 and 7.0, when running in proxy mode, does not authenticate FHTTP commands on TCP port 3141, which allows remote attackers to use the finjan-parameter-type header to (1) restart the service, (2) use the getlastmsg command to view log information, or (3) use the online command to force a policy update from the database server.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- Finjan SurfinGate 6.0/7.0 - FHTTP Restart Command Execution EDB-23585 · remote · Jan 23, 2004 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 10714 third-party-advisory
- 20040126 RE: Finjan SurfinGate Vulnerability mailing-list
- 20040123 Finjan SurfinGate Vulnerability mailing-list
- 20040123 Finjan SurfinGate Vulnerability mailing-list
- 9478 vdb-entry
- finjan-surfingate-execute-commands(14934) vdb-entry