Lucene search

[email protected]CVE-2003-1286

HistoryDec 31, 2003 - 5:00 a.m.

CVE-2003-1286

2003-12-3105:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2003-1286

http proxy

sambar server

security.ini

remote attackers

proxy requests

nvd

7.6 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.07 Low

EPSS

Percentile

93.9%

JSON

HTTP Proxy in Sambar Server before 6.0 beta 6, when security.ini lacks a 127.0.0.1 proxydeny entry, allows remote attackers to send proxy HTTP requests to the Sambar Server’s administrative interface and external web servers, by making a “Connection: keep-alive” request before the proxy requests.

CPENameOperatorVersion
sambar:sambar_serversambar sambar servereq6.0
sambar:sambar_serversambar sambar servereq5.3
sambar:sambar_serversambar sambar servereq5.0
sambar:sambar_serversambar sambar servereq5.1
sambar:sambar_serversambar sambar servereq5.2

CPE	Name	Operator	Version
sambar:sambar_server	sambar sambar server	eq	6.0
sambar:sambar_server	sambar sambar server	eq	5.3
sambar:sambar_server	sambar sambar server	eq	5.0
sambar:sambar_server	sambar sambar server	eq	5.1
sambar:sambar_server	sambar sambar server	eq	5.2

References

archives.neohapsis.com/archives/bugtraq/2004-04/0353.html

secunia.com/advisories/9578

securitytracker.com/id?1007819

www.idefense.com/application/poi/display?id=103&type=vulnerabilities&flashstatus=true

www.sambar.com/security.htm

www.securityfocus.com/bid/10256

exchange.xforce.ibmcloud.com/vulnerabilities/16054

7.6 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.07 Low

EPSS

Percentile

93.9%

JSON