[email protected]CVE-2001-1030

HistoryJul 18, 2001 - 4:00 a.m.

CVE-2001-1030

2001-07-1804:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2001-1030

squid

http accelerator

access control lists

acl

unauthorized activity

6.8 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

60.7%

JSON

Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists (ACLs) when the httpd_accel_host and http_accel_with_proxy off settings are used, which allows attackers to bypass the ACLs and conduct unauthorized activities such as port scanning.

CPENameOperatorVersion
squid:squid_web_proxysquid squid web proxyeq2.3stable3
immunix:immuniximmunixeq7.0
immunix:immuniximmunixeq6.2
immunix:immuniximmunixeq7.0_beta
squid:squid_web_proxysquid squid web proxyeq2.3stable4
mandrakesoft:mandrake_single_network_firewallmandrakesoft mandrake single network firewalleq7.2
caldera:openlinux_servercaldera openlinux servereq3.1
mandrakesoft:mandrake_linuxmandrakesoft mandrake linuxeq7.2
trustix:secure_linuxtrustix secure linuxeq1.1
redhat:linuxredhat linuxeq7.0

CPE	Name	Operator	Version
squid:squid_web_proxy	squid squid web proxy	eq	2.3stable3
immunix:immunix	immunix	eq	7.0
immunix:immunix	immunix	eq	6.2
immunix:immunix	immunix	eq	7.0_beta
squid:squid_web_proxy	squid squid web proxy	eq	2.3stable4
mandrakesoft:mandrake_single_network_firewall	mandrakesoft mandrake single network firewall	eq	7.2
caldera:openlinux_server	caldera openlinux server	eq	3.1
mandrakesoft:mandrake_linux	mandrakesoft mandrake linux	eq	7.2
trustix:secure_linux	trustix secure linux	eq	1.1
redhat:linux	redhat linux	eq	7.0

Rows per page:

1-10 of 151

References

archives.neohapsis.com/archives/bugtraq/2001-07/0362.html

download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-031-01

www.calderasystems.com/support/security/advisories/CSSA-2001-029.0.txt

www.linux-mandrake.com/en/security/2001/MDKSA-2001-066.php3

www.redhat.com/support/errata/RHSA-2001-097.html

www.securityfocus.com/archive/1/197727

exchange.xforce.ibmcloud.com/vulnerabilities/6862

6.8 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

60.7%

JSON

Related for CVE-2001-1030

nessus1 cvelist1