CVE-2009-0803

{"id": "CVE-2009-0803", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.4, "accessVector": "NETWORK", "vectorString": "AV:N/AC:H/Au:N/C:C/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "HIGH", "availabilityImpact": "NONE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 4.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2009-03-04T16:30:00.217", "references": [{"url": "http://www.kb.cert.org/vuls/id/435052", "tags": ["US Government Resource"], "source": "cve@mitre.org"}, {"url": "http://www.kb.cert.org/vuls/id/MAPG-7M6SM7", "tags": ["US Government Resource"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/33858", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "SmoothWall SmoothGuardian, as used in SmoothWall Firewall, NetworkGuardian, and SchoolGuardian 2008, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header."}, {"lang": "es", "value": "SmoothWall SmoothGuardian, usada en SmoothWall Firewall, NetworkGuardian, y SchoolGuardian 2008, cuando el modo de intercepci\u00f3n trasparente est\u00e1 activado, usa la cabecera HTTP Host para determinar el punto final remoto, lo que permite a los atacantes remotos evitar el control de acceso para Flash, Java, Silverlight y propablemente otras tecnolog\u00edas, y posiblemente comunicarse con sitios de intranet retringidos, a trav\u00e9s de p\u00e1ginas web manipuladas lo que causa que el cliente env\u00ede peticiones HTTP con una cabecera Host modificada."}], "lastModified": "2009-06-18T04:00:00.000", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:smoothwall:networkguardian:2008:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "125A7E97-7498-4F4B-BF57-72216059F299"}, {"criteria": "cpe:2.3:a:smoothwall:schoolguardian:2008:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "056B0BD8-F842-4844-8954-FE1CFC92C6BD"}, {"criteria": "cpe:2.3:a:smoothwall:smoothguardian:2008:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A4285E19-02DA-4A75-BE6F-F46769FD8A0A"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}