CVE-2007-4202

Guidance Software EnCase Enterprise Edition (EEE) 6 does not properly verify the identity of the acquisition target during communication with the EnCase Servlet (EEE servlet), which might allow remote attackers to spoof the disk image.

Score

CVSS 2.0 4.3 Medium

Status

Modified - cve@mitre.org

Published

2007-08-08

Last modified

2024-08-07

Affected products

• Encase (Guidance Software)

References

• http://www.isecpartners.com/files/iSEC-Breaking_Forensics_Software-Paper.v1_1.BH2007.pdf
• http://www.kb.cert.org/vuls/id/912593
• http://www.securityfocus.com/archive/1/474809/100/0/threaded
• http://www.securityfocus.com/archive/1/475335/100/0/threaded