Vulnerability in Surfcontrol Superscout Web Filter
CVE-2001-1465
SurfControl SuperScout only filters packets containing both an HTTP GET request and a Host header, which allows local users to bypass filtering by fragmenting packets so that no packet contains both data elements.
EPSS: 0.004 (27.7th percentile) — read the EPSS interpretation.
Affected products
- Surfcontrol Superscout_web_filter
- N/a — versions n/a
References
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)