CVE-2009-2300

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0560%

EPSS Percentile33.63th

Published2009年7月2日

Last Modified2026年4月23日

Vulnerability Description

The management interface in the phion airlock Web Application Firewall (WAF) 4.1-10.41 does not properly handle CGI requests that specify large width and height parameters for an image, which allows remote attackers to execute arbitrary commands or cause a denial of service (resource consumption) via a crafted request.

Affected Platforms (CPE)

📦

Phion

Airlock Web Application Firewall

= 4.1-10.41

References & Advisories

🔗 http://secunia.com/advisories/35641

🔗 http://www.securityfocus.com/archive/1/504681/100/0/threaded

🔗 https://techzone.phion.com/hotfix_HF4112