PT-2007-2646 · Netproxy · Netproxy

Craig Heffner · Published 2007-03-02 · Updated 2017-10-11 · CVE-2007-1225

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NetProxy version 4.03

Description The connection log file implementation does not record requests that omit http:// in a URL, which might allow remote attackers to conduct unauthorized activities and avoid detection.

Recommendations For NetProxy version 4.03, update the connection log file implementation to record all requests, including those that omit http:// in a URL, to prevent unauthorized activities from going undetected.

Exploit

Fix

Related Identifiers

CVE-2007-1225

Affected Products

Netproxy

References · 6

• 🔥 https://exploit-db.com/exploits/3381 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-1225 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32697 · Note
• http://vupen.com/english/advisories/2007/0779 · Note
• http://securityfocus.com/bid/22741 · Note
• http://osvdb.org/36002 · Note