fkie_cve-2009-2057
Vulnerability from fkie_nvd
Published
2009-06-15 19:30
Modified
2024-11-21 01:04
Severity ?
Summary
Microsoft Internet Explorer before 8 uses the HTTP Host header to determine the context of a document provided in a (1) 4xx or (2) 5xx CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response, aka an "SSL tampering" attack.
Impacted products
Vendor Product Version
microsoft ie 5.0
microsoft ie 5.0
microsoft ie 5.22
microsoft ie 6.0
microsoft ie 6.0
microsoft internet_explorer 3.0
microsoft internet_explorer 3.0.1
microsoft internet_explorer 3.0.2
microsoft internet_explorer 3.1
microsoft internet_explorer 3.2
microsoft internet_explorer 4.0
microsoft internet_explorer 4.0.1
microsoft internet_explorer 4.0.1
microsoft internet_explorer 4.0.1
microsoft internet_explorer 4.01
microsoft internet_explorer 4.1
microsoft internet_explorer 4.01
microsoft internet_explorer 4.5
microsoft internet_explorer 4.40.308
microsoft internet_explorer 4.40.520
microsoft internet_explorer 4.70.1155
microsoft internet_explorer 4.70.1158
microsoft internet_explorer 4.70.1215
microsoft internet_explorer 4.70.1300
microsoft internet_explorer 4.71.544
microsoft internet_explorer 4.71.1008.3
microsoft internet_explorer 4.71.1712.6
microsoft internet_explorer 4.72.2106.8
microsoft internet_explorer 4.72.3110.8
microsoft internet_explorer 4.72.3612.1713
microsoft internet_explorer 5
microsoft internet_explorer 5.0
microsoft internet_explorer 5.0.1
microsoft internet_explorer 5.0.1
microsoft internet_explorer 5.0.1
microsoft internet_explorer 5.0.1
microsoft internet_explorer 5.0.1
microsoft internet_explorer 5.00.0518.10
microsoft internet_explorer 5.00.0910.1309
microsoft internet_explorer 5.00.2014.0216
microsoft internet_explorer 5.00.2314.1003
microsoft internet_explorer 5.00.2614.3500
microsoft internet_explorer 5.00.2919.800
microsoft internet_explorer 5.00.2919.3800
microsoft internet_explorer 5.00.2919.6307
microsoft internet_explorer 5.00.2920.0000
microsoft internet_explorer 5.00.3103.1000
microsoft internet_explorer 5.00.3105.0106
microsoft internet_explorer 5.00.3314.2101
microsoft internet_explorer 5.00.3315.1000
microsoft internet_explorer 5.00.3502.1000
microsoft internet_explorer 5.00.3700.1000
microsoft internet_explorer 5.01
microsoft internet_explorer 5.1
microsoft internet_explorer 5.01
microsoft internet_explorer 5.01
microsoft internet_explorer 5.01
microsoft internet_explorer 5.01
microsoft internet_explorer 5.2.3
microsoft internet_explorer 5.5
microsoft internet_explorer 5.5
microsoft internet_explorer 5.5
microsoft internet_explorer 5.5
microsoft internet_explorer 5.50.3825.1300
microsoft internet_explorer 5.50.4030.2400
microsoft internet_explorer 5.50.4134.0600
microsoft internet_explorer 5.50.4308.2900
microsoft internet_explorer 5.50.4522.1800
microsoft internet_explorer 5.50.4807.2300
microsoft internet_explorer 6
microsoft internet_explorer 6
microsoft internet_explorer 6.0
microsoft internet_explorer 6.00.2462.0000
microsoft internet_explorer 6.00.2479.0006
microsoft internet_explorer 6.0.2600
microsoft internet_explorer 6.0.2800
microsoft internet_explorer 6.0.2800.1106
microsoft internet_explorer 6.00.2800.1106
microsoft internet_explorer 6.0.2900
microsoft internet_explorer 6.0.2900.2180
microsoft internet_explorer 6.00.2900.2180
microsoft internet_explorer 6.00.3663.0000
microsoft internet_explorer 6.00.3790.0000
microsoft internet_explorer 6.00.3790.1830
microsoft internet_explorer 6.00.3790.3959
microsoft internet_explorer 7
microsoft internet_explorer 7.0
microsoft internet_explorer 7.0
microsoft internet_explorer 7.0
microsoft internet_explorer 7.0
microsoft internet_explorer 7.0.5730.11
microsoft internet_explorer 7.00.5730.1100
microsoft internet_explorer 7.00.6000.16386
microsoft internet_explorer 7.00.6000.16441



{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:microsoft:ie:5.0:sp1:*:*:*:*:*:*",
              "matchCriteriaId": "C26125C2-2476-43E8-8878-8C1A5A8B244F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:ie:5.0:sp4:*:*:*:*:*:*",
              "matchCriteriaId": "FED6949F-54D0-4D36-B6A8-59EBFA2611E8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:ie:5.22:*:*:*:*:*:*:*",
              "matchCriteriaId": "226A1B77-A80E-4ADE-8318-749CD1AD7CD0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*",
              "matchCriteriaId": "24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:*",
              "matchCriteriaId": "DA3D2175-7DF7-4D57-8B26-5BA68EF7A935",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:3.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "1BBF9241-A175-438C-A793-3D245BE2AE35",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:3.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "F62AC866-A06F-47DB-AEDF-E345CE0B14A4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:3.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "943D5C5C-FC49-4EDE-AE75-A79CFF42208E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:3.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "59EB6841-0427-479B-8771-06DF62EE3C87",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:3.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "8873A08F-D4C7-46FC-8FE5-972644F85ADA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "A5B815D9-BC21-4A17-AF00-B8AD181027D7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:4.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "42502347-DD40-4F8C-9861-C0A88A3F8608",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:4.0.1:sp1:*:*:*:*:*:*",
              "matchCriteriaId": "0AF9C64F-9A67-4BA9-A653-75507935E6EA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:4.0.1:sp2:*:*:*:*:*:*",
              "matchCriteriaId": "C375A9AA-505B-444C-A45F-2BAAD0B2CD0D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:4.01:*:*:*:*:*:*:*",
              "matchCriteriaId": "B9D82B89-456D-41CB-A894-B6A22FB4415D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:4.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "44FF4E47-AD75-42C7-BB84-42BBA46A58B2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:4.01:sp1:*:*:*:*:*:*",
              "matchCriteriaId": "2E21CE6E-2B33-4225-B1DC-C19F1D578040",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:4.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "1B26CE22-E730-4247-853E-5E640DB3ECB5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:4.40.308:*:*:*:*:*:*:*",
              "matchCriteriaId": "0A652453-AB5F-405C-ABDE-CE1B54FEACED",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:4.40.520:*:*:*:*:*:*:*",
              "matchCriteriaId": "141080AB-48DE-4885-BAB6-6F0937ABD49B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:4.70.1155:*:*:*:*:*:*:*",
              "matchCriteriaId": "EB758D76-B7F6-4E87-B88D-620443655CA9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:4.70.1158:*:*:*:*:*:*:*",
              "matchCriteriaId": "28655AC5-1512-4F45-9963-CA26F73981CE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:4.70.1215:*:*:*:*:*:*:*",
              "matchCriteriaId": "C00F4F36-B88A-4FDB-BE52-83C6EF60BDB7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:4.70.1300:*:*:*:*:*:*:*",
              "matchCriteriaId": "BEC05584-F553-4D29-9C46-C9EE5F0CB166",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:4.71.544:*:*:*:*:*:*:*",
              "matchCriteriaId": "B108A86E-8387-446C-B823-BE6FCAE747A5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:4.71.1008.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "BA3F79B8-512A-4B88-868C-7C4ADFD223C9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:4.71.1712.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "078C3A86-C9F8-4A19-9DDC-1065B54E640F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:4.72.2106.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "9030923C-356E-4FAB-8E64-03D462B4DB5F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:4.72.3110.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "DC0FFABC-8BED-4838-85FE-406DC9CF9B92",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:4.72.3612.1713:*:*:*:*:*:*:*",
              "matchCriteriaId": "C9DB4A00-4F70-4189-81BD-9318C52DF2D2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:5:*:*:*:*:*:*:*",
              "matchCriteriaId": "B4071D03-D955-4C1B-ACD8-A864F7D0FA02",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "E6B8985B-B927-4928-B1DB-18E29F796992",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "3A04FEA6-37B0-44B0-844F-55652ABA1F85",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*",
              "matchCriteriaId": "4D56FB8E-2553-47C1-82A2-9E59023780CE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*",
              "matchCriteriaId": "8541EEED-94F4-42F8-9719-57F3EC85D52B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp3:*:*:*:*:*:*",
              "matchCriteriaId": "40372520-08CF-4F64-A7AC-7E0AE0964138",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp4:*:*:*:*:*:*",
              "matchCriteriaId": "2EB39B99-91A0-4B70-B12A-BA37F6AFBA83",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:5.00.0518.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "FBFE8C8E-F46C-4179-AE83-CE4720C8E0E9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:5.00.0910.1309:*:*:*:*:*:*:*",
              "matchCriteriaId": "61125B09-23AA-4D5A-8332-6B5CCD80C7A6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:5.00.2014.0216:*:*:*:*:*:*:*",
              "matchCriteriaId": "3AECF59F-B3C0-44CC-B77A-30E32B3E8BB5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:5.00.2314.1003:*:*:*:*:*:*:*",
              "matchCriteriaId": "D4690B85-86B9-448E-9249-B3885DEDC60E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:5.00.2614.3500:*:*:*:*:*:*:*",
              "matchCriteriaId": "D91F4C80-3B1B-45BD-966F-C9DBF98B875D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:5.00.2919.800:*:*:*:*:*:*:*",
              "matchCriteriaId": "F65E0DC1-40F6-4252-945A-A972343D1E29",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:5.00.2919.3800:*:*:*:*:*:*:*",
              "matchCriteriaId": "8C07C1A9-1A94-4653-8C57-6FCFC25854E4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:5.00.2919.6307:*:*:*:*:*:*:*",
              "matchCriteriaId": "EDC57519-AD96-4ECF-A5B2-4E45F7D55298",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:5.00.2920.0000:*:*:*:*:*:*:*",
              "matchCriteriaId": "37DE3DE6-A355-41F2-BF5E-E7526449E753",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:5.00.3103.1000:*:*:*:*:*:*:*",
              "matchCriteriaId": "5DB24B4F-44FF-4F0F-90FA-240A34B9599F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:5.00.3105.0106:*:*:*:*:*:*:*",
              "matchCriteriaId": "919A6551-DB18-49BD-AB92-4C453B3B728F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:5.00.3314.2101:*:*:*:*:*:*:*",
              "matchCriteriaId": "C512DAB3-2720-42D2-B27E-28F30FE0FE46",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:5.00.3315.1000:*:*:*:*:*:*:*",
              "matchCriteriaId": "CB90458F-1F2B-4F4C-88C6-4B670787D126",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:5.00.3502.1000:*:*:*:*:*:*:*",
              "matchCriteriaId": "6C2EFDB4-97C2-4DDF-8A65-FCFB60FCB540",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:5.00.3700.1000:*:*:*:*:*:*:*",
              "matchCriteriaId": "4A99CDC7-9341-4DFB-BB18-FF06C05FF9B0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*",
              "matchCriteriaId": "6219D36E-9E2C-4DC7-8FD5-FAD144A333F6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:5.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "B1CFF390-FF33-45CA-BC96-C6766491C616",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:5.01:sp1:*:*:*:*:*:*",
              "matchCriteriaId": "3BFFB565-F656-43E3-89E1-E412DC4C9D41",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:5.01:sp2:*:*:*:*:*:*",
              "matchCriteriaId": "BD3A3282-8842-4708-AF7B-0AFBEB5D4F9A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:5.01:sp3:*:*:*:*:*:*",
              "matchCriteriaId": "F4336F0E-75FE-4592-9D98-4F689804956E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*",
              "matchCriteriaId": "F3F2A51E-2675-4993-B9C2-F2D176A92857",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:5.2.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "DA6E5E4B-9E95-4019-8622-6E707FEC2FF6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "40F8042F-C621-45AE-9F8C-70469579643A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:5.5:preview:*:*:*:*:*:*",
              "matchCriteriaId": "8E93C22E-812E-4CDA-9850-2386CE1E817A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*",
              "matchCriteriaId": "2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*",
              "matchCriteriaId": "D05ED9D0-CF78-4FAD-9371-6FB3D5825148",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:5.50.3825.1300:*:*:*:*:*:*:*",
              "matchCriteriaId": "8BA6BA38-8B3B-4B9A-95BF-BCD412DD83B6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:5.50.4030.2400:*:*:*:*:*:*:*",
              "matchCriteriaId": "01BD2A05-3FCE-4C5D-8228-968630F27E28",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:5.50.4134.0600:*:*:*:*:*:*:*",
              "matchCriteriaId": "BF0EC334-AEAD-43CA-A609-C027060F4F20",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:5.50.4308.2900:*:*:*:*:*:*:*",
              "matchCriteriaId": "BAF320BE-F022-4E0E-9815-B8AEED87B384",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:5.50.4522.1800:*:*:*:*:*:*:*",
              "matchCriteriaId": "75532B2D-6814-4D20-8AEB-E7DFD66B6423",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:5.50.4807.2300:*:*:*:*:*:*:*",
              "matchCriteriaId": "83802E30-8E7D-4CAB-B8FC-10056CF833D6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*",
              "matchCriteriaId": "693D3C1C-E3E4-49DB-9A13-44ADDFF82507",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*",
              "matchCriteriaId": "D47247A3-7CD7-4D67-9D9B-A94A504DA1BE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "A19F6133-25D1-44A5-B6B9-354703436783",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:6.00.2462.0000:*:*:*:*:*:*:*",
              "matchCriteriaId": "314538E8-48EC-4869-9074-2A1F5B7CBB3C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:6.00.2479.0006:*:*:*:*:*:*:*",
              "matchCriteriaId": "F56B3A72-7C5E-4F0C-BBC7-AA13DDFBEE70",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:6.0.2600:*:*:*:*:*:*:*",
              "matchCriteriaId": "68656E52-AD8A-474E-9160-CD5F8857254B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:6.0.2800:*:*:*:*:*:*:*",
              "matchCriteriaId": "93F47C82-E767-47A8-88DE-417B004ED7FC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:6.0.2800.1106:*:*:*:*:*:*:*",
              "matchCriteriaId": "F86E7189-CE21-4007-A3FA-39A6B51A5AB9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:6.00.2800.1106:*:*:*:*:*:*:*",
              "matchCriteriaId": "BCE2555F-C4BE-482F-8DD9-976D2026058C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:6.0.2900:*:*:*:*:*:*:*",
              "matchCriteriaId": "7B90EA4B-DA10-44B7-BD3D-6AE1197212D5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:6.0.2900.2180:*:*:*:*:*:*:*",
              "matchCriteriaId": "7CBF9B51-5AF4-4317-9768-21D866AC7990",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:6.00.2900.2180:*:*:*:*:*:*:*",
              "matchCriteriaId": "61F352FE-C22E-4B33-A46F-77A164B5DABB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:6.00.3663.0000:*:*:*:*:*:*:*",
              "matchCriteriaId": "5ACD5A44-0926-4A1B-9900-1E7CC0A561C8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:6.00.3790.0000:*:*:*:*:*:*:*",
              "matchCriteriaId": "3E16BEF4-71AA-4E23-B438-D25FFABDB646",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:6.00.3790.1830:*:*:*:*:*:*:*",
              "matchCriteriaId": "1F32702E-F955-4DDB-B235-7C47E882453C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:6.00.3790.3959:*:*:*:*:*:*:*",
              "matchCriteriaId": "6FA2B4AD-C04D-4A6B-8570-5A2F5489F750",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*",
              "matchCriteriaId": "1A33FA7F-BB2A-4C66-B608-72997A2BD1DB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "6BC71FD8-D385-4507-BD14-B75FDD4C79E6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:7.0:beta:*:*:*:*:*:*",
              "matchCriteriaId": "506711D9-6E57-4EED-8628-36C7F2324040",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:7.0:beta1:*:*:*:*:*:*",
              "matchCriteriaId": "ED471260-0272-431F-A91E-AC2883D92497",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:7.0:beta3:*:*:*:*:*:*",
              "matchCriteriaId": "86584E3F-3B0D-4018-A186-E59F3B01CA5C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:7.0.5730.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "0E6E1020-1017-4670-9316-27C79F1E2698",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:7.00.5730.1100:*:*:*:*:*:*:*",
              "matchCriteriaId": "37F63AE1-8FC9-4C0F-8D19-F17DFA214E94",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:7.00.6000.16386:*:*:*:*:*:*:*",
              "matchCriteriaId": "35B1186A-FA5B-4E49-8C2F-BCD2D45F22A2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:7.00.6000.16441:*:*:*:*:*:*:*",
              "matchCriteriaId": "53D75496-8594-44DB-B5C4-EA3CABD6551A",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Microsoft Internet Explorer before 8 uses the HTTP Host header to determine the context of a document provided in a (1) 4xx or (2) 5xx CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response, aka an \"SSL tampering\" attack."
    },
    {
      "lang": "es",
      "value": "Microsoft Internet Explorer anteriores a v8 utiliza una cabecera HTTP Host para determinar el contexto de un documento proporcionado por una respuesta de CONEXI\u00d3N (1) 4xx o (2) 5xx desde un servidor proxy, lo que permite a los atacantes \"hombre en el medio\" ejecutar arbitrariamente una secuencia de comandos web modificando la respuesta CONEXI\u00d3N, tambi\u00e9n conocida como un ataque \"forzado SSL\"."
    }
  ],
  "id": "CVE-2009-2057",
  "lastModified": "2024-11-21T01:04:01.613",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 5.8,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 4.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": true
      }
    ]
  },
  "published": "2009-06-15T19:30:00.530",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://research.microsoft.com/apps/pubs/default.aspx?id=79323"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit"
      ],
      "url": "http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://research.microsoft.com/apps/pubs/default.aspx?id=79323"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-287"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.