CVE-2009-0802
published 2009-03-04CVE-2009-0802: Qbik WinGate, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to…
PriorityP426medium5.4CVSS 2.0
AVNACHAuNCCINAN
EPSS
2.42%
82.1th percentile
Qbik WinGate, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header.
Affected
15 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| qbik | wingate | — | — |
| qbik | wingate | — | — |
| qbik | wingate | — | — |
| qbik | wingate | — | — |
| qbik | wingate | — | — |
| qbik | wingate | — | — |
| qbik | wingate | — | — |
| qbik | wingate | — | — |
| qbik | wingate | — | — |
| qbik | wingate | — | — |
| qbik | wingate | — | — |
| qbik | wingate | — | — |
| qbik | wingate | — | — |
| qbik | wingate | — | — |
| qbik | wingate | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2009-03-04
Published