[email protected]CVE-2002-0778

HistoryAug 12, 2002 - 4:00 a.m.

CVE-2002-0778

2002-08-1204:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cisco

cache engine

content engine

proxy

remote attack

https

tcp

ip hiding

vulnerability

7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.007 Low

EPSS

Percentile

79.7%

JSON

The default configuration of the proxy for Cisco Cache Engine and Content Engine allows remote attackers to use HTTPS to make TCP connections to allowed IP addresses while hiding the actual source IP.

CPENameOperatorVersion
cisco:content_distribution_manager_4650cisco content distribution manager 4650eq4.1
cisco:cache_engine_505cisco cache engine 505eq2.4.0
cisco:content_enginecisco content engineeq507_4.0
cisco:content_enginecisco content engineeq590_2.2.0
cisco:content_distribution_manager_4650cisco content distribution manager 4650eq4.0
cisco:content_enginecisco content engineeq7320_4.0
cisco:content_enginecisco content engineeq7320_2.2.0
cisco:content_distribution_manager_4630cisco content distribution manager 4630eq4.1
cisco:content_enginecisco content engineeq507_4.1
cisco:cache_engine_550cisco cache engine 550eq*

CPE	Name	Operator	Version
cisco:content_distribution_manager_4650	cisco content distribution manager 4650	eq	4.1
cisco:cache_engine_505	cisco cache engine 505	eq	2.4.0
cisco:content_engine	cisco content engine	eq	507_4.0
cisco:content_engine	cisco content engine	eq	590_2.2.0
cisco:content_distribution_manager_4650	cisco content distribution manager 4650	eq	4.0
cisco:content_engine	cisco content engine	eq	7320_4.0
cisco:content_engine	cisco content engine	eq	7320_2.2.0
cisco:content_distribution_manager_4630	cisco content distribution manager 4630	eq	4.1
cisco:content_engine	cisco content engine	eq	507_4.1
cisco:cache_engine_550	cisco cache engine 550	eq	*

Rows per page:

1-10 of 391

References

www.cisco.com/warp/public/707/transparentcache-tcp-relay-vuln-pub.shtml

www.iss.net/security_center/static/9082.php

www.securityfocus.com/bid/4751

7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.007 Low

EPSS

Percentile

79.7%

JSON

Related for CVE-2002-0778

cvelist1 cisco1