CVE-2004-2107: Finjan Software Surfingate

High severity, CVSS 7.5. EPSS: 7.7% chance of exploitation in the next 30 days.

Finjan SurfinGate 6.0 and 7.0, when running in proxy mode, does not authenticate FHTTP commands on TCP port 3141, which allows remote attackers to use the finjan-parameter-type header to (1) restart the service, (2) use the getlastmsg command to view log information, or (3) use the online command to force a policy update from the database server.

Affected products

• Finjan Software Surfingate: version 6.0 only; version 6.0_1 only; version 6.0_5 only; version 7.0 only

Published 2004-12-31. Last modified 2026-06-16.