Microsoft Internet Explorer before 8 uses the HTTP Host header to determine the context of a document provided in a (1) 4xx or (2) 5xx CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response, aka an "SSL tampering" attack.
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: mitre

Published: 2022-10-03T16:24:07

Updated: 2022-10-03T16:24:07

Reserved: 2022-10-03T00:00:00


Link: CVE-2009-2057

JSON object: View

cve-icon NVD Information

Status : Analyzed

Published: 2009-06-15T19:30:00.530

Modified: 2021-07-23T15:06:52.870


Link: CVE-2009-2057

JSON object: View

cve-icon Redhat Information

No data.

CWE