CVE-2009-0803

MEDIO 5.4CVE-2009-0803 · Published 04/03/2009 · updated 16/06/2026

In breve

CVE-2009-0803 è una vulnerabilità MEDIO (CVSS 5.4) che riguarda networkguardian (smoothwall), schoolguardian (smoothwall), smoothguardian (smoothwall).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.4%, superiore al 83.7% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
networkguardian smoothwall	`= 2008`	No fix yet
schoolguardian smoothwall	`= 2008`	No fix yet
smoothguardian smoothwall	`= 2008`	No fix yet

Description

SmoothWall SmoothGuardian, as used in SmoothWall Firewall, NetworkGuardian, and SchoolGuardian 2008, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header.

References

kb.cert.org/vuls/id/435052 · US Government Resource
kb.cert.org/vuls/id/MAPG-7M6SM7 · US Government Resource
securityfocus.com/bid/33858 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free