CVE-2009-0802: Medium severity Qbik WinGate vulnerability
Qbik WinGate, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable 'transparent interception mode' in Qbik WinGate to prevent the product from using the HTTP Host header to determine remote endpoints, which can be abused to bypass access controls.
Qbik WinGate transparent interception mode = disabled
Event History
Frequently Asked Questions
What is the severity of CVE-2009-0802?
CVE-2009-0802 is classified as a medium severity vulnerability.
How do I fix CVE-2009-0802?
To fix CVE-2009-0802, ensure that transparent interception mode is disabled or apply recommended security patches from Qbik.
What software versions are affected by CVE-2009-0802?
CVE-2009-0802 affects multiple versions of Qbik WinGate, including versions 6.0.0, 6.0.1, 6.1, 6.2, and 6.5.2.
What types of attacks can exploit CVE-2009-0802?
CVE-2009-0802 can be exploited to bypass access controls and communicate with restricted intranet sites.
Is there a specific configuration that leads to CVE-2009-0802?
Yes, CVE-2009-0802 occurs when the transparent interception mode in Qbik WinGate is enabled.