GCVE-110-CERTCC-2008-435052

Advisory PublishedCVSS 0.0/10

Vulnetix · Advisory published February 23, 2009

Proxy servers running in interception mode ("transparent" proxies) that make connection decisions based on HTTP header values may be used by an attacker to relay connections.

Download JSON Open in Console

Risk Scores

CVSS 2.0

0.0/10

None · AV:--/AC:--/Au:--/C:--/I:--/A:--

certcc-cam

impact4population15exploitation2widely_known15score_current3.54375ease_of_exploitation10

certcc-vrda

d1_impact2d1_population2d1_direct_report1

certcc-cvss-temporal-env

temporal_score0remediation_levelNDreport_confidenceNDenvironmental_score0target_distributionNDenvironmental_vectorCDP:ND/TD:ND/CR:ND/IR:ND/AR:ND

References

Intercepting proxy servers may incorrectly rely on HTTP headers to make connections

url

Intercepting proxy servers may incorrectly rely on HTTP headers to make connections

url

Intercepting proxy servers may incorrectly rely on HTTP headers to make connections

url

Intercepting proxy servers may incorrectly rely on HTTP headers to make connections

url

Intercepting proxy servers may incorrectly rely on HTTP headers to make connections

url

Intercepting proxy servers may incorrectly rely on HTTP headers to make connections

url

Intercepting proxy servers may incorrectly rely on HTTP headers to make connections

url

Intercepting proxy servers may incorrectly rely on HTTP headers to make connections

url

Intercepting proxy servers may incorrectly rely on HTTP headers to make connections

advisory

Browse GCVE Records

73,118 records in the GCVE database · Updated July 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON