PT-1999-1290 · Red Hat · Squid+1

Published 1999-07-25 · Updated 2018-05-03 · CVE-1999-0710

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Squid package in Red Hat Linux versions 5.2 and 6.0

Description The issue allows remote attackers to use cachemgr.cgi as an intermediary to connect to other systems, because it is installed in a public web directory.

Recommendations For Red Hat Linux 5.2 and 6.0, consider restricting access to the cachemgr.cgi script to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-1999-0710

DSA-576-1

RHSA-2005:415

RHSA-2005_415

Affected Products

Red Hat

Squid

References · 19

• 🔥 https://exploit-db.com/exploits/20465 · Exploit
• https://osv.dev/vulnerability/CVE-1999-0710 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-1999-0710 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-1999-0710 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-1999-0710 · Security Note
• http://redhat.com/archives/fedora-announce-list/2005-May/msg00025.html · Note
• http://redhat.com/support/errata/archives/rh52-errata-general.html#squid · Note
• https://redhat.com/security/data/cve/CVE-2005-1519.html · Note
• http://debian.org/security/2004/dsa-576 · Note
• http://redhat.com/support/errata/RHSA-2005-489.html · Note
• https://redhat.com/security/data/cve/CVE-2005-1345.html · Note
• https://redhat.com/security/data/cve/CVE-2005-0626.html · Note
• http://fedoranews.org/updates/FEDORA--.shtml · Note
• https://redhat.com/security/data/cve/CVE-1999-0710.html · Note
• http://redhat.com/support/errata/RHSA-1999-025.html · Note