7.5

CVE-2001-1030

Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists (ACLs) when the httpd_accel_host and http_accel_with_proxy off settings are used, which allows attackers to bypass the ACLs and conduct unauthorized activities such as port scanning.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Caldera ≫ Openlinux Server Version3.1
Immunix ≫ Immunix Version6.2
Immunix ≫ Immunix Version7.0
Immunix ≫ Immunix Version7.0_beta
Squid ≫ Squid Web Proxy Version2.3stable3
Squid ≫ Squid Web Proxy Version2.3stable4
Mandrakesoft ≫ Mandrake Linux Version7.1
Mandrakesoft ≫ Mandrake Linux Version7.2
Mandrakesoft ≫ Mandrake Linux Version8.0
Redhat ≫ Linux Version7.0
Trustix ≫ Secure Linux Version1.1
Trustix ≫ Secure Linux Version1.01
Trustix ≫ Secure Linux Version1.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.96% 0.777
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://archives.neohapsis.com/archives/bugtraq/2001-07/0362.html
Patch
Vendor Advisory
http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-031-01
Patch
Vendor Advisory
http://www.calderasystems.com/support/security/advisories/CSSA-2001-029.0.txt
http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-066.php3
http://www.redhat.com/support/errata/RHSA-2001-097.html
Patch
Vendor Advisory
http://www.securityfocus.com/archive/1/197727
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6862