Lucene search

K
cve[email protected]CVE-2008-3494
HistoryAug 06, 2008 - 6:41 p.m.

CVE-2008-3494

2008-08-0618:41:00
CWE-264
web.nvd.nist.gov
24
cve-2008-3494
8e6
r3000
internet filter
http
host header
security vulnerability

7.6 High

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

0.011 Low

EPSS

Percentile

84.4%

8e6 R3000 Internet Filter 2.0.12.10 allows remote attackers to bypass intended restrictions via an extra HTTP Host header with additional leading text placed before the real Host header.

7.6 High

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

0.011 Low

EPSS

Percentile

84.4%

Related for CVE-2008-3494