Thin 'X-Forwarded-For' IP Address Spoofing Vulnerability
BID:44525
Info
Thin 'X-Forwarded-For' IP Address Spoofing Vulnerability
| Bugtraq ID: | 44525 |
| Class: | Design Error |
| CVE: |
CVE-2009-3287 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 13 2009 12:00AM |
| Updated: | Sep 13 2009 12:00AM |
| Credit: | Iñaki Baz Castillo |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Thin 'X-Forwarded-For' IP Address Spoofing Vulnerability
Thin is prone to a spoofing vulnerability.
An attacker can exploit this issue to spoof an IP address which may lead to a false sense of trust, allowing the attacker to perform malicious activities. Other attacks may also be possible.
Versions prior to Thin 1.2.4 are vulnerable.
Thin is prone to a spoofing vulnerability.
An attacker can exploit this issue to spoof an IP address which may lead to a false sense of trust, allowing the attacker to perform malicious activities. Other attacks may also be possible.
Versions prior to Thin 1.2.4 are vulnerable.
Exploit / POC
Thin 'X-Forwarded-For' IP Address Spoofing Vulnerability
Attackers can exploit this issue with readily available tools.
Attackers can exploit this issue with readily available tools.