PT-2001-2177 · Squid · Squid

Published 2001-07-18 · Updated 2017-10-10 · CVE-2001-1030

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Squid versions prior to 2.3STABLE5

Description The issue allows attackers to bypass access control lists (ACLs) and conduct unauthorized activities, such as port scanning, when specific settings are used in HTTP accelerator mode.

Recommendations For versions prior to 2.3STABLE5, update to version 2.3STABLE5 or later to enable access control lists (ACLs) when the httpd accel host and http accel with proxy off settings are used.

Fix

Related Identifiers

CVE-2001-1030

Affected Products

Squid

References · 8

• http://linux-mandrake.com/en/security/2001/MDKSA-2001-066.php3 · Vendor Advisory
• http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-031-01 · Vendor Advisory
• http://calderasystems.com/support/security/advisories/CSSA-2001-029.0.txt · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-1030 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2001-07/0362.html · Vendor Advisory
• http://securityfocus.com/archive/1/197727 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2001-097.html · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6862 · Note