high7.5
CVE-2002-0778
The default configuration of the proxy for Cisco Cache Engine and Content Engine allows remote attackers to use HTTPS to make TCP connections to allowed IP add…
Impact
The default configuration of the proxy for Cisco Cache Engine and Content Engine allows remote attackers to use HTTPS to make TCP connections to allowed IP addresses while hiding the actual source IP.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Content Distribution Manager 4630 | All versions Versions 4.0, 4.1 |
| Cisco | Content Distribution Manager 4650 | All versions Versions 4.0, 4.1 |
| Cisco | Content Engine | Versions 507, 507_2.2.0, 507_3.1, 507_4.0, 507_4.1, 560 |
| Cisco | Enterprise Content Delivery Network Software | Versions 4.0, 4.1 |
| Cisco | Cache Engine 505 | Versions 2.4.0, 3.0 |
| Cisco | Cache Engine 550 | All versions Versions 2.2.0, 2.4.0, 3.0 |
| Cisco | Cache Engine 570 | Versions 2.2.0, 2.4.0, 3.0, 570 |
| Cisco | Content Router 4430 | All versions |
References
- NVD record
- CVE.org record
- http://www.cisco.com/warp/public/707/transparentcache-tcp-relay-vuln-pub.shtml
- http://www.iss.net/security_center/static/9082.php
- http://www.securityfocus.com/bid/4751
- http://www.cisco.com/warp/public/707/transparentcache-tcp-relay-vuln-pub.shtml
- http://www.iss.net/security_center/static/9082.php
- http://www.securityfocus.com/bid/4751