ID de Prueba:	1.3.6.1.4.1.25623.1.0.900523
Categoría:	Privilege escalation
Título:	Ziproxy Security Bypass Vulnerability
Resumen:	Ziproxy server is prone to a security bypass vulnerability.
Descripción:	Summary: Ziproxy server is prone to a security bypass vulnerability. Vulnerability Insight: This vulnerability arises because ziproxy depends on HTTP Host headers to determine the remote endpoints while acting as a transparent proxy. Vulnerability Impact: This can be exploited to restrict websites or bypass a browser's security context protection mechanism by sending HTTP requests with forged HTTP Host header. Affected Software/OS: Ziproxy version 2.6.0 and prior on Linux. Solution: Upgrade to Ziproxy version 3.1.0 or later. CVSS Score: 5.4 CVSS Vector: AV:N/AC:H/Au:N/C:C/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2009-0804 BugTraq ID: 33858 http://www.securityfocus.com/bid/33858 CERT/CC vulnerability note: VU#435052 http://www.kb.cert.org/vuls/id/435052
Copyright	Copyright (C) 2009 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.