CVEvulnerability
CVE-2008-3494
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-08-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.8 HIGH — AV:N/AC:L/Au:N/C:C/I:N/A:N
- Weaknesses
- CWE-264
Description
8e6 R3000 Internet Filter 2.0.12.10 allows remote attackers to bypass intended restrictions via an extra HTTP Host header with additional leading text placed before the real Host header.
Affected configurations
• 8e6 r3000 internet filter 2.0.12.10
Related
Weakness · not in database (1)
Referenced by CWE · observed example (1)
- CWE-20 Improper Input Validation weakness
References
- http://secunia.com/advisories/31391 secunia.com
- http://www.securityfocus.com/archive/1/495117/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/30541 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44238 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/31391 secunia.com
- http://www.securityfocus.com/archive/1/495117/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/30541 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44238 exchange.xforce.ibmcloud.com