CVE-2009-0803

SmoothWall SmoothGuardian, as used in SmoothWall Firewall, NetworkGuardian, and SchoolGuardian 2008, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header.

CVSS v2.0 5.4 MEDIUM

5.4^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:H/Au:N/C:C/I:N/A:N

Exploitability : 4.9 / Impact : 6.9

Access Vector NETWORK

Access Complexity HIGH

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://www.kb.cert.org/vuls/id/435052	US Government Resource
http://www.kb.cert.org/vuls/id/MAPG-7M6SM7	US Government Resource
http://www.securityfocus.com/bid/33858	Vendor Advisory
http://www.kb.cert.org/vuls/id/435052	US Government Resource
http://www.kb.cert.org/vuls/id/MAPG-7M6SM7	US Government Resource
http://www.securityfocus.com/bid/33858	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:smoothwall:networkguardian:2008:::::::*
	cpe:2.3:a:smoothwall:schoolguardian:2008:::::::*
	cpe:2.3:a:smoothwall:smoothguardian:2008:::::::*

History

21 Nov 2024, 01:00

Type	Values Removed	Values Added
References	~~() http://www.kb.cert.org/vuls/id/435052 - US Government Resource~~	() http://www.kb.cert.org/vuls/id/435052 - US Government Resource
References	~~() http://www.kb.cert.org/vuls/id/MAPG-7M6SM7 - US Government Resource~~	() http://www.kb.cert.org/vuls/id/MAPG-7M6SM7 - US Government Resource
References	~~() http://www.securityfocus.com/bid/33858 - Vendor Advisory~~	() http://www.securityfocus.com/bid/33858 - Vendor Advisory

Information

Published : 2009-03-04 16:30

Updated : 2024-11-21 01:00

NVD link : CVE-2009-0803

Mitre link : CVE-2009-0803

CVE.ORG link : CVE-2009-0803

JSON object : View

Products Affected

smoothwall

smoothguardian
schoolguardian
networkguardian

CWE

CWE-264

Permissions, Privileges, and Access Controls

{"id": "CVE-2009-0803", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.4, "accessVector": "NETWORK", "vectorString": "AV:N/AC:H/Au:N/C:C/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "HIGH", "availabilityImpact": "NONE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 4.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2009-03-04T16:30:00.217", "references": [{"url": "http://www.kb.cert.org/vuls/id/435052", "tags": ["US Government Resource"], "source": "cve@mitre.org"}, {"url": "http://www.kb.cert.org/vuls/id/MAPG-7M6SM7", "tags": ["US Government Resource"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/33858", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.kb.cert.org/vuls/id/435052", "tags": ["US Government Resource"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.kb.cert.org/vuls/id/MAPG-7M6SM7", "tags": ["US Government Resource"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/33858", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "SmoothWall SmoothGuardian, as used in SmoothWall Firewall, NetworkGuardian, and SchoolGuardian 2008, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header."}, {"lang": "es", "value": "SmoothWall SmoothGuardian, usada en SmoothWall Firewall, NetworkGuardian, y SchoolGuardian 2008, cuando el modo de intercepci\u00f3n trasparente est\u00e1 activado, usa la cabecera HTTP Host para determinar el punto final remoto, lo que permite a los atacantes remotos evitar el control de acceso para Flash, Java, Silverlight y propablemente otras tecnolog\u00edas, y posiblemente comunicarse con sitios de intranet retringidos, a trav\u00e9s de p\u00e1ginas web manipuladas lo que causa que el cliente env\u00ede peticiones HTTP con una cabecera Host modificada."}], "lastModified": "2024-11-21T01:00:56.967", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:smoothwall:networkguardian:2008:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "125A7E97-7498-4F4B-BF57-72216059F299"}, {"criteria": "cpe:2.3:a:smoothwall:schoolguardian:2008:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "056B0BD8-F842-4844-8954-FE1CFC92C6BD"}, {"criteria": "cpe:2.3:a:smoothwall:smoothguardian:2008:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A4285E19-02DA-4A75-BE6F-F46769FD8A0A"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}