CVE-2007-1225

UNKNOWN

The connection log file implementation in Grok Developments NetProxy 4

Published Mar 2, 2007

Modified 1 years ago

Details

The connection log file implementation in Grok Developments NetProxy 4.03 does not record requests that omit http:// in a URL, which might allow remote attackers to conduct unauthorized activities and avoid detection.

References

WEB

http://osvdb.org/36002

WEB

http://www.securityfocus.com/bid/22741

WEB

http://www.vupen.com/english/advisories/2007/0779

WEB

https://exchange.xforce.ibmcloud.com/vulnerabilities/32697

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2007-1225

DETECTION

https://www.exploit-db.com/exploits/3381

CVSS Analysis

CVSS v2.0

10.0

Exploitability

Access Vector

NetworkAV:N

Access Complexity

LowAC:L

Authentication

NoneAu:N

Impact

Confidentiality

CompleteC:C

Integrity

CompleteI:C

Availability

CompleteA:C

10/AV:N/AC:L/Au:N/C:C/I:C/A:C

Ecosystems

Timeline

PublishedMar 2, 2007

ModifiedAug 7, 2024