SurfControl SuperScout only filters packets containing both an HTTP GET request and a Host header, which allows local users to bypass filtering by fragmenting packets so that no packet contains both data elements.
http://www.kb.cert.org/vuls/id/139315
http://securitytracker.com/id?1001801
Source: Mitre, NVD
Published: 2002-02-26
Updated: 2026-06-16
Base Score: 4.6
Vector: CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:P
Severity: Medium
EPSS: 0.00065