CVEvulnerability

CVE-2005-1108

5.0 MEDIUM Published 2005-05-02 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2005-05-02
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N

Description

The ij_untrusted_url function in JunkBuster 2.0.2-r2, with single-threaded mode enabled, allows remote attackers to overwrite the referrer field via a crafted HTTP request.

Affected configurations

• junkbuster internet junkbuster 2.0.2 r2

References

http://bugs.gentoo.org/show_bug.cgi?id=88537 Patch
http://secunia.com/advisories/14932/ Vendor Advisory
http://www.debian.org/security/2005/dsa-713 Patch, Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200504-11.xml Patch, Vendor Advisory
http://www.osvdb.org/15502 www.osvdb.org
http://www.securityfocus.com/bid/13147 Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/20093 exchange.xforce.ibmcloud.com
http://bugs.gentoo.org/show_bug.cgi?id=88537 Patch
http://secunia.com/advisories/14932/ Vendor Advisory
http://www.debian.org/security/2005/dsa-713 Patch, Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200504-11.xml Patch, Vendor Advisory
http://www.osvdb.org/15502 www.osvdb.org
http://www.securityfocus.com/bid/13147 Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/20093 exchange.xforce.ibmcloud.com