CVE-2008-1106

The management interface in Akamai Client (formerly Red Swoosh) 3322 and earlier allows remote attackers to bypass authentication via an HTTP request that contains (1) no Referer header, or (2) a spoofed Referer header that matches an approved domain, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and force the client to download and execute arbitrary files.

• CWE-287
• CWE-352

• http://secunia.com/advisories/30135Patch, Vendor Advisory
• http://secunia.com/secunia_research/2008-19/advisory/Vendor Advisory
• http://securityreason.com/securityalert/3930
• http://www.securityfocus.com/archive/1/493169/100/0/threaded
• http://www.securityfocus.com/archive/1/493170/100/0/threaded
• http://www.securitytracker.com/id?1020208
• http://www.vupen.com/english/advisories/2008/1761/references
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42895
• http://secunia.com/advisories/30135Patch, Vendor Advisory
• http://secunia.com/secunia_research/2008-19/advisory/Vendor Advisory
• http://securityreason.com/securityalert/3930
• http://www.securityfocus.com/archive/1/493169/100/0/threaded
• http://www.securityfocus.com/archive/1/493170/100/0/threaded
• http://www.securitytracker.com/id?1020208
• http://www.vupen.com/english/advisories/2008/1761/references
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42895

Published

Jun 9, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-1100Buffer overflow in the cli_scanpe function in libclamav (lib…
• CVE-2008-1101Buffer overflow in kvdocve.dll in the KeyView document viewi…
• CVE-2008-1102Stack-based buffer overflow in the imb_loadhdr function in B…
• CVE-2008-1103Multiple unspecified vulnerabilities in Blender have unknown…
• CVE-2008-1104Stack-based buffer overflow in Foxit Reader before 2.3 build…
• CVE-2008-1105Heap-based buffer overflow in the receive_smb_raw function i…
• CVE-2008-1107Multiple stack-based buffer overflows in the Danske Bank e-S…
• CVE-2008-1108Buffer overflow in Evolution 2.22.1, when the ITip Formatter…
• CVE-2008-1109Heap-based buffer overflow in Evolution 2.22.1 allows user-a…
• CVE-2008-1110Buffer overflow in demuxers/demux_asf.c (aka the ASF demuxer…
• CVE-2008-1111mod_cgi in lighttpd 1.4.18 sends the source code of CGI scri…
• CVE-2008-1112Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…