CVE-2005-1108: Junkbuster Internet Junkbuster

Medium severity, CVSS 5.0. EPSS: 2% chance of exploitation in the next 30 days.

The ij_untrusted_url function in JunkBuster 2.0.2-r2, with single-threaded mode enabled, allows remote attackers to overwrite the referrer field via a crafted HTTP request.

Affected products

• Junkbuster Internet Junkbuster: version 2.0.2_r2 only

Published 2005-05-02. Last modified 2026-06-16.