CVE-2009-0803: Medium severity Smoothwall NetworkGuardian vulnerability
SmoothWall SmoothGuardian, as used in SmoothWall Firewall, NetworkGuardian, and SchoolGuardian 2008, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable transparent interception mode so the product does not rely on the HTTP Host header to determine the remote endpoint, preventing bypass of access controls for Flash, Java, Silverlight, and similar technologies.
SmoothWall SmoothGuardian (used in SmoothWall Firewall, NetworkGuardian, SchoolGuardian 2008) transparent interception mode = disabled
Event History
Frequently Asked Questions
What is the severity of CVE-2009-0803?
CVE-2009-0803 is classified as a medium severity vulnerability.
How do I fix CVE-2009-0803?
To fix CVE-2009-0803, disable the transparent interception mode if it is not necessary for your application.
What systems are affected by CVE-2009-0803?
CVE-2009-0803 affects SmoothWall SmoothGuardian, NetworkGuardian, and SchoolGuardian versions 2008.
What type of attack does CVE-2009-0803 allow?
CVE-2009-0803 allows remote attackers to bypass access controls for Flash, Java, and Silverlight content.
Is there a tool available to test for CVE-2009-0803?
There are no publicly available specific tools to test for CVE-2009-0803, but general web vulnerability scanners may help identify similar issues.