CVE-2001-1465
SurfControl SuperScout only filters packets containing both an HTTP GET request and a Host header...
SurfControl SuperScout only filters packets containing both an HTTP GET request and a Host header, which allows local users to bypass filtering by fragmenting packets so that no packet contains both data elements.
Exploit likelihood
What each source reports
NVD Score used
SurfControl SuperScout only filters packets containing both an HTTP GET request and a Host header, which allows local users to bypass filtering by fragmenting packets so that no packet contains both data elements.
- Record
CVE-2001-1465- CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
SurfControl SuperScout only filters packets containing both an HTTP GET request and a Host header, which allows local users to bypass filtering by fragmenting packets so that no packet contains both data elements.
- Record
CVE-2001-1465- Updated
- 2026-11-02
EUVDEUVD-2001-1445 No score
SurfControl SuperScout only filters packets containing both an HTTP GET request and a Host header, which allows local users to bypass filtering by fragmenting packets so that no packet contains both data elements.
- Record
EUVD-2001-1445- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wj7w-628g-2cg9 No score
SurfControl SuperScout only filters packets containing both an HTTP GET request and a Host header...
SurfControl SuperScout only filters packets containing both an HTTP GET request and a Host header, which allows local users to bypass filtering by fragmenting packets so that no packet contains both data elements.
- Record
GHSA-wj7w-628g-2cg9- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2001-1465 is a medium vulnerability (CVSS 4.6) in Surfcontrol Superscout Web Filter, published February 26, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.35%, the 28th percentile. No source names a fixed version.