CVE

Id
38239  
CVE No.
CVE-2009-0804  
Status
Candidate  
Description
Ziproxy 2.6.0, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header.  
Phase
Assigned (20090304)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
416819 38239 CVE-2009-0804 CONFIRM:http://www.kb.cert.org/vuls/id/MAPG-7N9GN8  View
416820 38239 CVE-2009-0804 CERT-VN:VU#435052  View
416821 38239 CVE-2009-0804 URL:http://www.kb.cert.org/vuls/id/435052  View
416822 38239 CVE-2009-0804 BID:33858  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
44858 JVNDB-2009-005865 SimpleCMMS における SQL インジェクションの脆弱性 SimpleCMMS には、SQL インジェクションの脆弱性が存在します。 CVE-2009-0808 38239 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005865.html  View