CVE-2009-0612
published 2009-02-17CVE-2009-0612: Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 3.x and InterScan Web Security Suite (IWSS) 3.x, when basic authorization is enabled on the…
PriorityP419medium4.3CVSS 2.0
AVNACMAuNCPINAN
EPSS
2.17%
80.0th percentile
Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 3.x and InterScan Web Security Suite (IWSS) 3.x, when basic authorization is enabled on the standalone proxy, forwards the Proxy-Authorization header from Windows Media Player, which allows remote web servers to obtain credentials by offering a media stream and then capturing this header.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| trendmicro | interscan_web_security_suite | — | — |
| trendmicro | interscan_web_security_suite | — | — |
| trendmicro | interscan_web_security_virtual_appliance | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://secunia.com/advisories/33891http://www.securityfocus.com/archive/1/500760/100/0/threadedhttp://www.securityfocus.com/bid/33687http://www.securitytracker.com/id?1021716https://exchange.xforce.ibmcloud.com/vulnerabilities/48681http://secunia.com/advisories/33891http://www.securityfocus.com/archive/1/500760/100/0/threadedhttp://www.securityfocus.com/bid/33687http://www.securitytracker.com/id?1021716https://exchange.xforce.ibmcloud.com/vulnerabilities/48681
2009-02-17
Published