ID de Prueba:	1.3.6.1.4.1.25623.1.0.900325
Categoría:	Web application abuses
Título:	Qbik WinGate HTTP Proxy Server Access Controls Bypass Vulnerability
Resumen:	WinGate HTTP Proxy Server is prone to access controls bypass vulnerability.
Descripción:	Summary: WinGate HTTP Proxy Server is prone to access controls bypass vulnerability. Vulnerability Insight: This issue occurs when the proxy makes a forwarding decision based on the 'Host' HTTP header instead of the destination IP address while the proxy server works in transparent interception mode. Vulnerability Impact: Successful exploitation will let the attacker obtain sensitive information i.e. Intranet webpage details. Affected Software/OS: WinGate version 6.0 to 6.5.2 Build 1217. Solution: Upgrade to latest version. CVSS Score: 5.4 CVSS Vector: AV:N/AC:H/Au:N/C:C/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2009-0802 BugTraq ID: 33858 http://www.securityfocus.com/bid/33858 CERT/CC vulnerability note: VU#435052 http://www.kb.cert.org/vuls/id/435052
Copyright	Copyright (C) 2009 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.