Lucene search

K
cve[email protected]CVE-2011-1843
HistoryMay 03, 2011 - 12:55 a.m.

CVE-2011-1843

2011-05-0300:55:01
CWE-189
web.nvd.nist.gov
141
cve-2011-1843
tinyproxy
integer overflow
access restrictions
tcp connection
security vulnerability

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

6.8 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.7%

Integer overflow in conf.c in Tinyproxy before 1.8.3 might allow remote attackers to bypass intended access restrictions in opportunistic circumstances via a TCP connection, related to improper handling of invalid port numbers.

Affected configurations

NVD
Node
banutinyproxyRange1.8.2
OR
banutinyproxyMatch1.5.0
OR
banutinyproxyMatch1.5.0pre1
OR
banutinyproxyMatch1.5.0pre2
OR
banutinyproxyMatch1.5.0pre3
OR
banutinyproxyMatch1.5.0pre4
OR
banutinyproxyMatch1.5.0pre5
OR
banutinyproxyMatch1.5.0pre6
OR
banutinyproxyMatch1.5.0rc1
OR
banutinyproxyMatch1.5.0rc10
OR
banutinyproxyMatch1.5.0rc2
OR
banutinyproxyMatch1.5.0rc4
OR
banutinyproxyMatch1.5.0rc5
OR
banutinyproxyMatch1.5.0rc6
OR
banutinyproxyMatch1.5.0rc7
OR
banutinyproxyMatch1.5.0rc8
OR
banutinyproxyMatch1.5.0rc9
OR
banutinyproxyMatch1.5.1
OR
banutinyproxyMatch1.5.1pre1
OR
banutinyproxyMatch1.5.1pre2
OR
banutinyproxyMatch1.5.1pre3
OR
banutinyproxyMatch1.5.1pre4
OR
banutinyproxyMatch1.5.1pre5
OR
banutinyproxyMatch1.5.1pre6
OR
banutinyproxyMatch1.5.1rc1
OR
banutinyproxyMatch1.5.1rc2
OR
banutinyproxyMatch1.5.1rc3
OR
banutinyproxyMatch1.5.1rc4
OR
banutinyproxyMatch1.5.2
OR
banutinyproxyMatch1.5.2rc1
OR
banutinyproxyMatch1.5.2rc2
OR
banutinyproxyMatch1.5.3
OR
banutinyproxyMatch1.5.3rc1
OR
banutinyproxyMatch1.6.0
OR
banutinyproxyMatch1.6.0a
OR
banutinyproxyMatch1.6.0pre1
OR
banutinyproxyMatch1.6.0pre2
OR
banutinyproxyMatch1.6.0pre3
OR
banutinyproxyMatch1.6.0pre4
OR
banutinyproxyMatch1.6.0rc1
OR
banutinyproxyMatch1.6.0rc2
OR
banutinyproxyMatch1.6.0rc3
OR
banutinyproxyMatch1.6.1
OR
banutinyproxyMatch1.6.2
OR
banutinyproxyMatch1.6.3
OR
banutinyproxyMatch1.6.4
OR
banutinyproxyMatch1.6.5
OR
banutinyproxyMatch1.7.0
OR
banutinyproxyMatch1.7.1
OR
banutinyproxyMatch1.8.0
OR
banutinyproxyMatch1.8.1

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

6.8 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.7%