high7.5
CVE-2001-1030
Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists (ACLs) when the httpd_accel_host and http_accel_with_proxy off settings a…
Impact
Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists (ACLs) when the httpd_accel_host and http_accel_with_proxy off settings are used, which allows attackers to bypass the ACLs and conduct unauthorized activities such as port scanning.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Caldera | Openlinux Server | Version 3.1 |
| Immunix | Immunix | Versions 6.2, 7.0, 7.0_beta |
| Mandrakesoft | Mandrake Single Network Firewall | Version 7.2 |
| Squid | Squid Web Proxy | Versions 2.3stable3, 2.3stable4 |
| Mandrakesoft | Mandrake Linux | Versions 7.1, 7.2, 8.0 |
| Mandrakesoft | Mandrake Linux Corporate Server | Version 1.0.1 |
| Redhat | Linux | Version 7.0 |
| Trustix | Secure Linux | Versions 1.1, 1.01, 1.2 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2001-07/0362.html
- http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-031-01
- http://www.calderasystems.com/support/security/advisories/CSSA-2001-029.0.txt
- http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-066.php3
- http://www.redhat.com/support/errata/RHSA-2001-097.html
- http://www.securityfocus.com/archive/1/197727
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6862
- http://archives.neohapsis.com/archives/bugtraq/2001-07/0362.html
- http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-031-01
- http://www.calderasystems.com/support/security/advisories/CSSA-2001-029.0.txt
- http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-066.php3
- http://www.redhat.com/support/errata/RHSA-2001-097.html
- http://www.securityfocus.com/archive/1/197727
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6862