Unscored CVE-2005-1994 EUVD-2005-1996GHSA-fwqw-4jph-2hqq

Finjan SurfinGate 7.0SP2 and SP3 allows remote attackers to download blocked files via hex-encoded characters in a filename, as demonstrate…

Published Jun 20, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Finjan SurfinGate 7.0SP2 and SP3 allows remote attackers to download blocked files via hex-encoded characters in a filename, as demonstrated using "%2e".

References

17324 vdb-entry
finjan-surfingate-security-bypass(21010) vdb-entry
20050614 URL-Encoding Problem in Finjan SurfinGate mailing-list
ADV-2005-0778 vdb-entry
15711 third-party-advisory