7.5
CVE-2001-1030
- EPSS 0.18%
- Published 18.07.2001 04:00:00
- Last modified 03.04.2025 01:03:51
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists (ACLs) when the httpd_accel_host and http_accel_with_proxy off settings are used, which allows attackers to bypass the ACLs and conduct unauthorized activities such as port scanning.
Data is provided by the National Vulnerability Database (NVD)
Caldera ≫ Openlinux Server Version3.1
Mandrakesoft ≫ Mandrake Single Network Firewall Version7.2
Squid ≫ Squid Web Proxy Version2.3stable3
Squid ≫ Squid Web Proxy Version2.3stable4
Mandrakesoft ≫ Mandrake Linux Version7.1
Mandrakesoft ≫ Mandrake Linux Version7.2
Mandrakesoft ≫ Mandrake Linux Version8.0
Mandrakesoft ≫ Mandrake Linux Corporate Server Version1.0.1
Trustix ≫ Secure Linux Version1.1
Trustix ≫ Secure Linux Version1.01
Trustix ≫ Secure Linux Version1.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.18% | 0.37 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|