CVE-2003-1286

2005-11-2202:00:00

mitre

www.cve.org

AI Score

6.7

Confidence

Low

EPSS

0.07

Percentile

94.0%

JSON

HTTP Proxy in Sambar Server before 6.0 beta 6, when security.ini lacks a 127.0.0.1 proxydeny entry, allows remote attackers to send proxy HTTP requests to the Sambar Server’s administrative interface and external web servers, by making a “Connection: keep-alive” request before the proxy requests.

References

archives.neohapsis.com/archives/bugtraq/2004-04/0353.html

secunia.com/advisories/9578

securitytracker.com/id?1007819

www.idefense.com/application/poi/display?id=103&type=vulnerabilities&flashstatus=true

www.sambar.com/security.htm

www.securityfocus.com/bid/10256

exchange.xforce.ibmcloud.com/vulnerabilities/16054