CVE-2009-0801

2022-10-0316:24:12

mitre

www.cve.org

squid

interception mode

http host header

remote attackers

access controls

flash

java

silverlight

8.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.6%

JSON

Squid, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header.