PatchTheCVEsurfingate vulnerabilities and fixes
Recent CVEs affecting surfingate, with upgrade or downgrade steps. 4 tracked.
surfingate has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2005-06-14. Highest priority: CVE-2004-2107 (score 55/100).
- CVE-2005-1994 MEDIUM 5.0 DOWNGRADE Finjan SurfinGate 7.0SP2 and SP3 allows remote attackers to download blocked files via hex-encoded characters
- CVE-2004-2107 HIGH 7.5 DOWNGRADE Finjan SurfinGate 6.0 and 7.0, when running in proxy mode, does not authenticate FHTTP commands on TCP port 31
- CVE-2002-1962 HIGH 7.5 DOWNGRADE Finjan Software SurfinGate 6.0 and 6.0 1 allows remote attackers to bypass URL access restrictions via a URL w
- CVE-2002-1961 HIGH 7.5 DOWNGRADE Finjan Software SurfinGate 6.0 and 6.0 1 allows remote attackers to bypass URL access restrictions via a URL w
FAQ
How do I fix surfingate vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is surfingate being exploited right now?
None of the tracked surfingate CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which surfingate CVE should I patch first?
CVE-2004-2107 currently ranks highest (55/100): Finjan SurfinGate 6.0 and 7.0, when running in proxy mode, does not authenticate FHTTP commands on TCP port 31.