7.5
CVSSv2

CVE-2003-0803

Published: 06/10/2003 Updated: 10/09/2008
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Nokia Electronic Documentation (NED) 5.0 allows remote malicious users to use NED as an open HTTP proxy via a URL in the location parameter, which NED accesses and returns to the user.

Vulnerable Product Search on Vulmon Subscribe to Product

nokia electronic documentation 5.0

Exploits

source: wwwsecurityfocuscom/bid/8625/info A vulnerability has been discovered in Nokia Electronic Documentation (NED) that may allow an attacker to redirect connections to a third party system The problem likely occurs due to the NED server failing to sufficiently verify hosts provided within specific HTTP requests As a result, an attac ...