← Vulnerability feed

Vulnerability record · CVE-2006-0578 · published 8 February 2006

CVE-2006-0578: Bluecoat sgos vulnerability

Bluecoat · Sgos

Blue Coat Proxy Security Gateway OS (SGOS) 4.1.2.1 does not enforce CONNECT rules when using Deep Content Inspection, which allows remote attackers to bypass connection filters.

7.5 CVSS 2.0 High EPSS 1.8% · top 23.0%
7.5CVSS 2.0 base score
1.8%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
14References
16 Jun 2026Last modified by NVD

Description

Blue Coat Proxy Security Gateway OS (SGOS) 4.1.2.1 does not enforce CONNECT rules when using Deep Content Inspection, which allows remote attackers to bypass connection filters.

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://secunia.com/advisories/18622 Vendor Advisory
http://securitytracker.com/id?1015644
http://www.bluecoat.com/support/knowledge/advisory_connect_denial_ignore.html
http://www.osvdb.org/22853
http://www.secumind.net/content/french/modules/news/article.php?storyid=8 Vendor AdvisoryURL Repurposed
http://www.vupen.com/english/advisories/2006/0401
https://exchange.xforce.ibmcloud.com/vulnerabilities/24446
http://secunia.com/advisories/18622 Vendor Advisory
http://securitytracker.com/id?1015644
http://www.bluecoat.com/support/knowledge/advisory_connect_denial_ignore.html
http://www.osvdb.org/22853
http://www.secumind.net/content/french/modules/news/article.php?storyid=8 Vendor AdvisoryURL Repurposed
http://www.vupen.com/english/advisories/2006/0401
https://exchange.xforce.ibmcloud.com/vulnerabilities/24446

Track CVE-2006-0578 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.3CVE-2010-5189Bluecoat sgos permissions and access controls vulnerabilityBlue Coat ProxySG before SGOS 4.3.4.1, 5.x before SGOS 5.4.5.1, 5.5 before SGOS 5.5.4.1, and 6.x before SGOS 6.1.1.1 allows remote authenticated user…EPSS 1.8%5.0CVE-2010-5190Bluecoat sgos permissions and access controls vulnerabilityThe Active Content Transformation functionality in Blue Coat ProxySG before SGOS 4.3.4.2, 5.x before SGOS 5.4.5.1, 5.5 before SGOS 5.5.4.1, and 6.x b…EPSS 1.4%5.0CVE-2011-5126Bluecoat sgos information exposure vulnerabilityBlue Coat ProxySG 6.1 before SGOS 6.1.5.1 and 6.2 before SGOS 6.2.2.1 writes the secure heap to core images, which allows context-dependent attackers…EPSS 1.1%4.3CVE-2010-5192Bluecoat sgos cross-site scripting vulnerabilityCross-site scripting (XSS) vulnerability in the Java Management Console in Blue Coat ProxySG before SGOS 4.3.4.1, 5.x before SGOS 5.4.5.1, 5.5 before…EPSS 2.0%

Source: NIST National Vulnerability Database (record CVE-2006-0578), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.