4.3
CVE-2007-4202
- EPSS 1.21%
- Veröffentlicht 08.08.2007 01:17:00
- Zuletzt bearbeitet 16.06.2026 22:43:35
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginGuidance Software EnCase Enterprise Edition (EEE) 6 does not properly verify the identity of the acquisition target during communication with the EnCase Servlet (EEE servlet), which might allow remote attackers to spoof the disk image.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Guidance Software ≫ Encase Version6.0 Editionenterprise_edition
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.21% | 0.643 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:N
|
http://www.isecpartners.com/files/iSEC-Breaking_Forensics_Software-Paper.v1_1.BH2007.pdf
http://www.securityfocus.com/archive/1/474809/100/0/threaded
http://www.securityfocus.com/archive/1/475335/100/0/threaded
http://www.kb.cert.org/vuls/id/912593