5.8

CVE-2009-1211

EPSS 1.36%
Veröffentlicht 01.04.2009 10:30:00
Zuletzt bearbeitet 16.06.2026 23:06:46
Erkennungen
Login

Blue Coat ProxySG, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 5

NVD 31 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Bluecoat ≫ Proxysg Va-10

Bluecoat ≫ Proxysg Va-15

Bluecoat ≫ Proxysg Va-20

Bluecoat ≫ Proxysg Va-5

Bluecoat ≫ Proxysg

Bluecoat ≫ Proxysg Sg210-10 Version - Update - Edition acceleration

Bluecoat ≫ Proxysg Sg210-10 Version - Update - Edition full_proxy

Bluecoat ≫ Proxysg Sg210-25 Version - Update - Edition acceleration

Bluecoat ≫ Proxysg Sg210-25 Version - Update - Edition full_proxy

Bluecoat ≫ Proxysg Sg210-5 Version - Update - Edition acceleration

Bluecoat ≫ Proxysg Sg210-5 Version - Update - Edition full_proxy

Bluecoat ≫ Proxysg Sg510-10 Version - Update - Edition acceleration

Bluecoat ≫ Proxysg Sg510-10 Version - Update - Edition full_proxy

Bluecoat ≫ Proxysg Sg510-20 Version - Update - Edition acceleration

Bluecoat ≫ Proxysg Sg510-20 Version - Update - Edition full_proxy

Bluecoat ≫ Proxysg Sg510-25 Version - Update - Edition acceleration

Bluecoat ≫ Proxysg Sg510-25 Version - Update - Edition full_proxy

Bluecoat ≫ Proxysg Sg510-5 Version - Update - Edition full_proxy

Bluecoat ≫ Proxysg Sg810-10 Version - Update - Edition acceleration

Bluecoat ≫ Proxysg Sg810-10 Version - Update - Edition full_proxy

Bluecoat ≫ Proxysg Sg810-20 Version - Update - Edition acceleration

Bluecoat ≫ Proxysg Sg810-20 Version - Update - Edition full_proxy

Bluecoat ≫ Proxysg Sg810-25 Version - Update - Edition acceleration

Bluecoat ≫ Proxysg Sg810-25 Version - Update - Edition full_proxy

Bluecoat ≫ Proxysg Sg810-5 Version - Update - Edition full_proxy

Bluecoat ≫ Proxysg Sg9000-10 Version - Update - Edition acceleration

Bluecoat ≫ Proxysg Sg9000-10 Version - Update - Edition full_proxy

Bluecoat ≫ Proxysg Sg9000-20 Version - Update - Edition acceleration

Bluecoat ≫ Proxysg Sg9000-20 Version - Update - Edition full_proxy

Bluecoat ≫ Proxysg Sg9000-5 Version - Update - Edition acceleration

Bluecoat ≫ Proxysg Sg9000-5 Version - Update - Edition full_proxy

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.36%	0.682

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	5.8	8.6	4.9	AV:N/AC:M/Au:N/C:N/I:P/A:P

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://www.securitytracker.com/id?1021781

https://hypersonic.bluecoat.com/support/securityadvisories/ProxySG_in_transparent_deployments

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2009-1211

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2009-1211

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2009-1211

EUVD