NVD

Id
1067  
Name
CVE-2008-1106  
Description
The management interface in Akamai Client (formerly Red Swoosh) 3322 and earlier allows remote attackers to bypass authentication via an HTTP request that contains (1) no Referer header, or (2) a spoofed Referer header that matches an approved domain, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and force the client to download and execute arbitrary files.  
Reject
 
CVSS Version
2  
CVSS Score
7.1  
Severity
High  
CVSS Base Score
7.1  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:C/A:N)  
Pub Date
2017-01-03  
Published
2008-06-09  
Modified Date
2011-03-07  
Seq
2008-1106  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
6603 1067 CVE-2008-1106 3930  View
6604 1067 CVE-2008-1106 20080606 Akamai Technologies Security Advisory 2008-0003 (Akamai Client Software)  View
6605 1067 CVE-2008-1106 20080606 Secunia Research: Akamai Red Swoosh Cross-Site Request Forgery  View
6606 1067 CVE-2008-1106 1020208  View
6607 1067 CVE-2008-1106 ADV-2008-1761  View
6608 1067 CVE-2008-1106 redswoosh-http-csrf(42895)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
47477 JVNDB-2008-002787 Akamai Client の管理インターフェースにおける認証を回避される脆弱性 Akamai Client および Red Swoosh の管理インターフェースには、認証を回避される脆弱性が存在します。 CVE-2008-1106 31219 CVE-2008-1106 1067 7.1 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002787.html 2008-06-09 2012-06-26 View