SecuritySpace - CVE-2009-0801

Vulnerability Search		Search 219043 CVE descriptions and 99761 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2009-0801

Description: Squid, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2009-0801
BugTraq ID: 33858
http://www.securityfocus.com/bid/33858
CERT/CC vulnerability note: VU#435052
http://www.kb.cert.org/vuls/id/435052

CVE ID:	CVE-2009-0801
Description:	Squid, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2009-0801 BugTraq ID: 33858 http://www.securityfocus.com/bid/33858 CERT/CC vulnerability note: VU#435052 http://www.kb.cert.org/vuls/id/435052