Lucene search

[email protected]CVE-2009-0612

HistoryFeb 17, 2009 - 5:30 p.m.

CVE-2009-0612

2009-02-1717:30:00

CWE-200

[email protected]

web.nvd.nist.gov

cve-2009-0612

trend micro

iwsva

iwss

proxy vulnerability

remote credential capture

7.4 High

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

65.6%

JSON

Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 3.x and InterScan Web Security Suite (IWSS) 3.x, when basic authorization is enabled on the standalone proxy, forwards the Proxy-Authorization header from Windows Media Player, which allows remote web servers to obtain credentials by offering a media stream and then capturing this header.

CPENameOperatorVersion
trendmicro:interscan_web_security_suitetrendmicro interscan web security suiteeq2.5
trendmicro:interscan_web_security_suitetrendmicro interscan web security suiteeq3.1
trendmicro:interscan_web_security_virtual_appliancetrendmicro interscan web security virtual applianceeq3.1

CPE	Name	Operator	Version
trendmicro:interscan_web_security_suite	trendmicro interscan web security suite	eq	2.5
trendmicro:interscan_web_security_suite	trendmicro interscan web security suite	eq	3.1
trendmicro:interscan_web_security_virtual_appliance	trendmicro interscan web security virtual appliance	eq	3.1

References

secunia.com/advisories/33891

www.securityfocus.com/archive/1/500760/100/0/threaded

www.securityfocus.com/bid/33687

www.securitytracker.com/id?1021716

exchange.xforce.ibmcloud.com/vulnerabilities/48681

7.4 High

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

65.6%

JSON

Related for CVE-2009-0612

prion1 cvelist1