Lucene search

K
nessusTenable5079.PASL
HistoryAug 18, 2004 - 12:00 a.m.

Google Chrome < 1.0.154.53 Multiple Vulnerabilities

2004-08-1800:00:00
Tenable
www.tenable.com
93

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.002 Low

EPSS

Percentile

64.5%

The version of Google Chrome installed on the remote host is earlier than 1.0.154.53. Such versions are reportedly affected by a multiple vulnerabilities :

  • The browser uses the HTTP Host header to determine the context of a 4xx/5xx CONNECT response from a proxy server. This could allow a man-in-the-middle attacker to execute arbitrary script code in the context of a legitimate server. (CVE-2009-2060)

  • The browser displays a cached certificate for 4xx/5xx CONNECT response pages from a proxy server. A man-in-the-middle attacker could exploit this by displaying a spoofed web page with the valid certificate of a legitimate website.

Binary data 5079.pasl
VendorProductVersionCPE
googlechromecpe:/a:google:chrome

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.002 Low

EPSS

Percentile

64.5%