Squid, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2009-03-04T16:00:00Z

Updated: 2024-09-17T03:55:01.224Z

Reserved: 2009-03-04T00:00:00Z

Link: CVE-2009-0801

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2009-03-04T16:30:00.170

Modified: 2009-06-18T04:00:00.000

Link: CVE-2009-0801

cve-icon Redhat

Severity : Low

Publid Date: 2009-02-23T00:00:00Z

Links: CVE-2009-0801 - Bugzilla