medium4.6
CVE-2001-1465
SurfControl SuperScout only filters packets containing both an HTTP GET request and a Host header, which allows local users to bypass filtering by fragmenting …
Impact
SurfControl SuperScout only filters packets containing both an HTTP GET request and a Host header, which allows local users to bypass filtering by fragmenting packets so that no packet contains both data elements.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Surfcontrol | Superscout Web Filter | All versions |