PT-2007-2646 · Netproxy · Netproxy

Craig Heffner · Publicado 2007-03-02 · Atualizado 2017-10-11 · CVE-2007-1225

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NetProxy version 4.03

Description The connection log file implementation does not record requests that omit http:// in a URL, which might allow remote attackers to conduct unauthorized activities and avoid detection.

Recommendations For NetProxy version 4.03, update the connection log file implementation to record all requests, including those that omit http:// in a URL, to prevent unauthorized activities from going undetected.

Exploit

Correção

Identificadores relacionados

CVE-2007-1225

Produtos afetados

Netproxy

Referências · 6

• 🔥 https://exploit-db.com/exploits/3381 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-1225 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32697 · Nota
• http://vupen.com/english/advisories/2007/0779 · Nota
• http://securityfocus.com/bid/22741 · Nota
• http://osvdb.org/36002 · Nota