CVE

Id
31223  
CVE No.
CVE-2008-1106  
Status
Candidate  
Description
The management interface in Akamai Client (formerly Red Swoosh) 3322 and earlier allows remote attackers to bypass authentication via an HTTP request that contains (1) no Referer header, or (2) a spoofed Referer header that matches an approved domain, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and force the client to download and execute arbitrary files.  
Phase
Assigned (20080229)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
333215 31223 CVE-2008-1106 BUGTRAQ:20080606 Akamai Technologies Security Advisory 2008-0003 (Akamai Client Software)  View
333216 31223 CVE-2008-1106 URL:http://www.securityfocus.com/archive/1/archive/1/493169/100/0/threaded  View
333217 31223 CVE-2008-1106 BUGTRAQ:20080606 Secunia Research: Akamai Red Swoosh Cross-Site Request Forgery  View
333218 31223 CVE-2008-1106 URL:http://www.securityfocus.com/archive/1/archive/1/493170/100/0/threaded  View
333219 31223 CVE-2008-1106 MISC:http://secunia.com/secunia_research/2008-19/advisory/  View
333220 31223 CVE-2008-1106 VUPEN:ADV-2008-1761  View
333221 31223 CVE-2008-1106 URL:http://www.vupen.com/english/advisories/2008/1761/references  View
333222 31223 CVE-2008-1106 SECTRACK:1020208  View
333223 31223 CVE-2008-1106 URL:http://www.securitytracker.com/id?1020208  View
333224 31223 CVE-2008-1106 SECUNIA:30135  View
333225 31223 CVE-2008-1106 URL:http://secunia.com/advisories/30135  View
333226 31223 CVE-2008-1106 SREASON:3930  View
333227 31223 CVE-2008-1106 URL:http://securityreason.com/securityalert/3930  View
333228 31223 CVE-2008-1106 XF:redswoosh-http-csrf(42895)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
50222 JVNDB-2008-005532 xine-lib の xineplug_dmx_asf.so プラグイン におけるバッファオーバーフローの脆弱性 xine-lib の xineplug_dmx_asf.so プラグインの demuxers/demux_asf.c には、バッファオーバーフローの脆弱性が存在します。 CVE-2008-1110 31223 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005532.html  View