CVE-2007-4202

Published: Aug 8, 2007Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Guidance Software EnCase Enterprise Edition (EEE) 6 does not properly verify the identity of the acquisition target during communication with the EnCase Servlet (EEE servlet), which might allow remote attackers to spoof the disk image.

Affected (1)

Products: Guidance Software: Encase

Guidance Software

1 product

Encase

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Guidance Software Encase	Version 6.0

References (8)

http://www.isecpartners.com/files/iSEC-Breaking_Forensics_Software-Paper.v1_1.BH2007.pdf

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/912593

Source: cve@mitre.org

US Government Resource

http://www.securityfocus.com/archive/1/474809/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/475335/100/0/threaded

Source: cve@mitre.org

http://www.isecpartners.com/files/iSEC-Breaking_Forensics_Software-Paper.v1_1.BH2007.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kb.cert.org/vuls/id/912593

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.securityfocus.com/archive/1/474809/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/475335/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.