CVE-2001-1030

Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists (ACLs) when the httpd_accel_host and http_accel_with_proxy off settings are used, which allows attackers to bypass the ACLs and conduct unauthorized activities such as port scanning.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:caldera:openlinux_server:3.1:*:*:*:*:*:*:*
cpe:2.3:a:immunix:immunix:6.2:*:*:*:*:*:*:*
cpe:2.3:a:immunix:immunix:7.0:*:*:*:*:*:*:*
cpe:2.3:a:immunix:immunix:7.0_beta:*:*:*:*:*:*:*
cpe:2.3:a:mandrakesoft:mandrake_single_network_firewall:7.2:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid_web_proxy:2.3stable3:*:*:*:*:*:*:*
cpe:2.3:a:squid:squid_web_proxy:2.3stable4:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:mandrakesoft:mandrake_linux:7.1:*:*:*:*:*:*:*
cpe:2.3:o:mandrakesoft:mandrake_linux:7.2:*:*:*:*:*:*:*
cpe:2.3:o:mandrakesoft:mandrake_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:1.0.1:*:*:*:*:*:*:*
cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:trustix:secure_linux:1.1:*:*:*:*:*:*:*
cpe:2.3:o:trustix:secure_linux:1.01:*:*:*:*:*:*:*
cpe:2.3:o:trustix:secure_linux:1.2:*:*:*:*:*:*:*

History

No history.

Information

Published : 2001-07-18 04:00

Updated : 2023-12-10 10:17


NVD link : CVE-2001-1030

Mitre link : CVE-2001-1030

CVE.ORG link : CVE-2001-1030


JSON object : View

Products Affected

mandrakesoft

  • mandrake_single_network_firewall
  • mandrake_linux
  • mandrake_linux_corporate_server

redhat

  • linux

trustix

  • secure_linux

squid

  • squid_web_proxy

caldera

  • openlinux_server

immunix

  • immunix