1. Home
  2. CVE Database
  3. CVE-2009-1211
MEDIUM · 5.8

CVE-2009-1211

Blue Coat ProxySG, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, S...

Vulnerability Description

Blue Coat ProxySG, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header.

CVSS Score

5.8

MEDIUM

AV:N/AC:M/Au:N/C:N/I:P/A:P
Confidentiality
NONE
Integrity
PARTIAL
Availability
PARTIAL

Affected Products

VendorProductVersions
BluecoatProxysg Va-10All versions
BluecoatProxysg Va-15All versions
BluecoatProxysg Va-20All versions
BluecoatProxysg Va-5All versions
BluecoatProxysgAll versions
BluecoatProxysg Sg210-10-
BluecoatProxysg Sg210-25-
BluecoatProxysg Sg210-5-
BluecoatProxysg Sg510-10-
BluecoatProxysg Sg510-20-
BluecoatProxysg Sg510-25-
BluecoatProxysg Sg510-5-
BluecoatProxysg Sg810-10-
BluecoatProxysg Sg810-20-
BluecoatProxysg Sg810-25-
BluecoatProxysg Sg810-5-
BluecoatProxysg Sg9000-10-
BluecoatProxysg Sg9000-20-
BluecoatProxysg Sg9000-5-

Related Weaknesses (CWE)

CWE-16

References

FAQ

What is CVE-2009-1211?

CVE-2009-1211 is a vulnerability with a CVSS score of 5.8 (MEDIUM). Blue Coat ProxySG, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, S...

How severe is CVE-2009-1211?

CVE-2009-1211 has been rated MEDIUM with a CVSS base score of 5.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2009-1211?

Check the references section above for vendor advisories and patch information. Affected products include: Bluecoat Proxysg Va-10, Bluecoat Proxysg Va-15, Bluecoat Proxysg Va-20, Bluecoat Proxysg Va-5, Bluecoat Proxysg.