CVE-2005-1994

Finjan SurfinGate 7.0SP2 and SP3 allows remote attackers to download blocked files via hex-encoded characters in a filename, as demonstrated using "%2e"...

Finjan SurfinGate 7.0 - .ASCII File Extension File Filter Circumvention

Finjan SurfinGate 7.0 - .ASCII File Extension File Filter Circumvention source: https://www.securityfocus.com/bid/13959/info SurfinGate may allow an attacker to circumvent file filters. It has been reported that an attacker may bypass SurfinGate file filtering rules by using ASCII encoding in the...

CVE-2004-2107

Finjan SurfinGate 6.0 and 7.0, when running in proxy mode, does not authenticate FHTTP commands on TCP port 3141, which allows remote attackers to use the finjan-parameter-type header to 1 restart the service, 2 use the getlastmsg command to view log information, or 3 use the online command to...

CVE-2004-2107

Finjan SurfinGate 6.0/7.0, when in proxy mode, permits unauthenticated FHTTP commands on TCP port 3141. An attacker can use the finjan-parameter-type header to (1) restart the service, (2) view log information via getlastmsg, or (3) force a policy update from the database server via an online com...

CVE-2004-2107

Finjan SurfinGate 6.0 and 7.0, when running in proxy mode, does not authenticate FHTTP commands on TCP port 3141, which allows remote attackers to use the finjan-parameter-type header to 1 restart the service, 2 use the getlastmsg command to view log information, or 3 use the online command to...

Finjan SurfinGate Proxy FHTTP Command Admin Functions Authentication Bypass

The remote host is running a Finjan SurfinGate, a web proxy. It is possible to bypass admin authentication by using the proxy to connect to itself. A remote attacker could exploit this to view log information, force a policy update, or restart the service. C Tenable Network Security, Inc...

Finjan SurfinGate unauthorized access

By using proxy server it's possible to obtain access to administration...

Finjan SurfinGate Vulnerability

VENDOR: Finjan www.finjan.com PRODUCT: SurfinGate recently renamed “Vital Security” VERSIONS: All releases of versions 6 & 7 as of 1/22/2004. Older versions have not been tested. NOTIFICATION: The vendor has known of the problem over a year DESCRIPTION...

Finjan SurfinGate 6.0/7.0 - FHTTP Restart Command Execution

source: https://www.securityfocus.com/bid/9478/info Finjan SurfinGate is prone to a vulnerability that may permit remote attackers to execute certain management commands using the FHTTP protocol through the management control port 3141/TCP. It has been reported that commands could be issued to...

CVE-2002-1962

Finjan Software SurfinGate 6.0 and 6.0 1 allows remote attackers to bypass URL access restrictions via a URL with an IP address instead of a hostname...

CVE-2002-1961

Finjan Software SurfinGate 6.0 and 6.0 1 allows remote attackers to bypass URL access restrictions via a URL whose hostname portion uses a fully qualified domain name FQDN that ends in a "." dot...

SurfinGate.txt

Hi! I've found two possibilities to bypass the Finjan SurfinGate URL filter - Tested with Finjan SurfinGate 6.0x on Windows NT 4.0 and 2000. 1. IP Tunnel Normally humans use domain- and hostnames instead of IP addresses. Most users will add entries like "www.computec.ch" in the URL list of Finjan...