PT-2001-2177 · Squid · Squid

Publicado 2001-07-18 · Atualizado 2017-10-10 · CVE-2001-1030

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Squid versions prior to 2.3STABLE5

Description The issue allows attackers to bypass access control lists (ACLs) and conduct unauthorized activities, such as port scanning, when specific settings are used in HTTP accelerator mode.

Recommendations For versions prior to 2.3STABLE5, update to version 2.3STABLE5 or later to enable access control lists (ACLs) when the httpd accel host and http accel with proxy off settings are used.

Correção

Identificadores relacionados

CVE-2001-1030

Produtos afetados

Squid

Referências · 8

• http://linux-mandrake.com/en/security/2001/MDKSA-2001-066.php3 · Aviso do Fabricante
• http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-031-01 · Aviso do Fabricante
• http://calderasystems.com/support/security/advisories/CSSA-2001-029.0.txt · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2001-1030 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6862 · Nota
• http://archives.neohapsis.com/archives/bugtraq/2001-07/0362.html · Aviso do Fabricante
• http://securityfocus.com/archive/1/197727 · Aviso do Fabricante
• http://redhat.com/support/errata/RHSA-2001-097.html · Aviso do Fabricante