PT-1998-1182 · Squid · Squid Internet Object Cache

Publicado 1998-02-20 · Atualizado 2017-12-19 · CVE-1999-1273

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Squid Internet Object Cache version 1.1.20

Description The issue allows users to bypass access control lists (ACLs) by encoding the URL with hexadecimal escape sequences.

Recommendations For Squid Internet Object Cache version 1.1.20, consider updating to a newer version that addresses this issue, as the current version allows users to bypass access control lists. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-1999-1273

Produtos afetados

Squid Internet Object Cache

Referências · 3

• 🔥 http://securityfocus.com/archive/1/8551 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/1627 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-1999-1273 · Nota de Segurança