CVE-2008-6298

Published: Feb 26, 2009Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Unspecified vulnerability in sISAPILocation before 1.0.2.2 allows remote attackers to bypass intended access restrictions for character encoding and the cookie secure flag via unknown vectors related to the "HTTP header rewrite function."

Affected (3)

Products: Rocketeer.dip: Sisapilocation

Rocketeer.dip

1 product

Sisapilocation

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Rocketeer.dip Sisapilocation	Up to 1.0.2.0
Rocketeer.dip Sisapilocation	Version 1.0.1.3
Rocketeer.dip Sisapilocation	Version 1.0.1.4

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (14)

http://jvn.jp/en/jp/JVN67060882/index.html

Source: cve@mitre.org

http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000076.html

Source: cve@mitre.org

http://rocketeer.dip.jp/sanaki/free/free100.htm

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/32581

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/32247

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/3105

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/46516

Source: cve@mitre.org

http://jvn.jp/en/jp/JVN67060882/index.html