CVE-2009-0788 Server-side request forgery in n/a
Remote attackers can exploit improper URL rewriting to access sensitive host information or use the server as a proxy for arbitrary connections.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2009-0788?
CVE-2009-0788 is a medium-severity server-side request forgery vulnerability in n/a, published on 18 Apr 2011. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Red Hat Network (RHN) Satellite Server 5.3 and 5.4 does not properly rewrite unspecified URLs, which allows remote attackers to (1) obtain unspecified sensitive host information or (2) use the server as an inadvertent proxy to connect to arbitrary services and IP addresses via unspecified vectors.
Weakness: CWE-200
Which versions are affected by CVE-2009-0788?
It affects 1 product.
Products include Redhat Network Satellite Server.
How do I fix CVE-2009-0788?
Apply the vendor's patch.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is CVE-2009-0788 being exploited?
There is no known exploitation of CVE-2009-0788 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-688x-7w25-gh2x.