CVE-2004-2107

CVE-2004-2107 describes an authentication bypass vulnerability in Finjan SurfinGate versions 6.0 and 7.0 when operating in proxy mode. Remote attackers can exploit this flaw by sending unauthenticated FHTTP commands to TCP port 3141, leveraging the "finjan-parameter-type" header to restart the service, view log information, or force policy updates. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low complexity, and potential for partial confidentiality, integrity, and availability impacts. While there is no evidence of active exploitation in the wild, an exploit module for restarting the service is publicly available on ExploitDB, though community discussion and media coverage are minimal.