VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Apr 1, 2009· Updated Apr 23, 2026

CVE-2009-1211

CVE-2009-1211

Description

Blue Coat ProxySG, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header.

Affected products

31
  • Bluecoat/Proxysg Va 10
    cpe:2.3:a:bluecoat:proxysg_va-10:*:*:*:*:*:*:*:*
  • Bluecoat/Proxysg Va 15
    cpe:2.3:a:bluecoat:proxysg_va-15:*:*:*:*:*:*:*:*
  • Bluecoat/Proxysg Va 20
    cpe:2.3:a:bluecoat:proxysg_va-20:*:*:*:*:*:*:*:*
  • Bluecoat/Proxysg Va 5
    cpe:2.3:a:bluecoat:proxysg_va-5:*:*:*:*:*:*:*:*
  • Bluecoat/Proxysg
    cpe:2.3:h:bluecoat:proxysg:*:*:*:*:*:*:*:*
  • Bluecoat/Proxysg Sg210 102 versions
    cpe:2.3:h:bluecoat:proxysg_sg210-10:-:-:acceleration:*:*:*:*:*+ 1 more
    • cpe:2.3:h:bluecoat:proxysg_sg210-10:-:-:acceleration:*:*:*:*:*
    • cpe:2.3:h:bluecoat:proxysg_sg210-10:-:-:full_proxy:*:*:*:*:*
  • Bluecoat/Proxysg Sg210 252 versions
    cpe:2.3:h:bluecoat:proxysg_sg210-25:-:-:acceleration:*:*:*:*:*+ 1 more
    • cpe:2.3:h:bluecoat:proxysg_sg210-25:-:-:acceleration:*:*:*:*:*
    • cpe:2.3:h:bluecoat:proxysg_sg210-25:-:-:full_proxy:*:*:*:*:*
  • Bluecoat/Proxysg Sg210 52 versions
    cpe:2.3:h:bluecoat:proxysg_sg210-5:-:-:acceleration:*:*:*:*:*+ 1 more
    • cpe:2.3:h:bluecoat:proxysg_sg210-5:-:-:acceleration:*:*:*:*:*
    • cpe:2.3:h:bluecoat:proxysg_sg210-5:-:-:full_proxy:*:*:*:*:*
  • Bluecoat/Proxysg Sg510 102 versions
    cpe:2.3:h:bluecoat:proxysg_sg510-10:-:-:acceleration:*:*:*:*:*+ 1 more
    • cpe:2.3:h:bluecoat:proxysg_sg510-10:-:-:acceleration:*:*:*:*:*
    • cpe:2.3:h:bluecoat:proxysg_sg510-10:-:-:full_proxy:*:*:*:*:*
  • Bluecoat/Proxysg Sg510 202 versions
    cpe:2.3:h:bluecoat:proxysg_sg510-20:-:-:acceleration:*:*:*:*:*+ 1 more
    • cpe:2.3:h:bluecoat:proxysg_sg510-20:-:-:acceleration:*:*:*:*:*
    • cpe:2.3:h:bluecoat:proxysg_sg510-20:-:-:full_proxy:*:*:*:*:*
  • Bluecoat/Proxysg Sg510 252 versions
    cpe:2.3:h:bluecoat:proxysg_sg510-25:-:-:acceleration:*:*:*:*:*+ 1 more
    • cpe:2.3:h:bluecoat:proxysg_sg510-25:-:-:acceleration:*:*:*:*:*
    • cpe:2.3:h:bluecoat:proxysg_sg510-25:-:-:full_proxy:*:*:*:*:*
  • Bluecoat/Proxysg Sg510 5
    cpe:2.3:h:bluecoat:proxysg_sg510-5:-:-:full_proxy:*:*:*:*:*
  • Bluecoat/Proxysg Sg810 102 versions
    cpe:2.3:h:bluecoat:proxysg_sg810-10:-:-:acceleration:*:*:*:*:*+ 1 more
    • cpe:2.3:h:bluecoat:proxysg_sg810-10:-:-:acceleration:*:*:*:*:*
    • cpe:2.3:h:bluecoat:proxysg_sg810-10:-:-:full_proxy:*:*:*:*:*
  • Bluecoat/Proxysg Sg810 202 versions
    cpe:2.3:h:bluecoat:proxysg_sg810-20:-:-:acceleration:*:*:*:*:*+ 1 more
    • cpe:2.3:h:bluecoat:proxysg_sg810-20:-:-:acceleration:*:*:*:*:*
    • cpe:2.3:h:bluecoat:proxysg_sg810-20:-:-:full_proxy:*:*:*:*:*
  • Bluecoat/Proxysg Sg810 252 versions
    cpe:2.3:h:bluecoat:proxysg_sg810-25:-:-:acceleration:*:*:*:*:*+ 1 more
    • cpe:2.3:h:bluecoat:proxysg_sg810-25:-:-:acceleration:*:*:*:*:*
    • cpe:2.3:h:bluecoat:proxysg_sg810-25:-:-:full_proxy:*:*:*:*:*
  • Bluecoat/Proxysg Sg810 5
    cpe:2.3:h:bluecoat:proxysg_sg810-5:-:-:full_proxy:*:*:*:*:*
  • Bluecoat/Proxysg Sg9000 102 versions
    cpe:2.3:h:bluecoat:proxysg_sg9000-10:-:-:acceleration:*:*:*:*:*+ 1 more
    • cpe:2.3:h:bluecoat:proxysg_sg9000-10:-:-:acceleration:*:*:*:*:*
    • cpe:2.3:h:bluecoat:proxysg_sg9000-10:-:-:full_proxy:*:*:*:*:*
  • Bluecoat/Proxysg Sg9000 202 versions
    cpe:2.3:h:bluecoat:proxysg_sg9000-20:-:-:acceleration:*:*:*:*:*+ 1 more
    • cpe:2.3:h:bluecoat:proxysg_sg9000-20:-:-:acceleration:*:*:*:*:*
    • cpe:2.3:h:bluecoat:proxysg_sg9000-20:-:-:full_proxy:*:*:*:*:*
  • Bluecoat/Proxysg Sg9000 52 versions
    cpe:2.3:h:bluecoat:proxysg_sg9000-5:-:-:acceleration:*:*:*:*:*+ 1 more
    • cpe:2.3:h:bluecoat:proxysg_sg9000-5:-:-:acceleration:*:*:*:*:*
    • cpe:2.3:h:bluecoat:proxysg_sg9000-5:-:-:full_proxy:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.