Lucene search
K

253 matches found

Debian CVE
Debian CVE
added 2012/10/09 11:0 p.m.20 views

CVE-2012-3505

Tinyproxy 1.8.3 and earlier allows remote attackers to cause a denial of service CPU and memory consumption via 1 a large number of headers or 2 a large number of forged headers that trigger hash collisions predictably. bucket...

5CVSS6.5AI score0.05172EPSS
Exploits0
OpenVAS
OpenVAS
added 2011/05/12 12:0 a.m.23 views

FreeBSD Ports: tinyproxy

The remote host is missing an update to the system as announced in the referenced advisory. VID b9281fb9-61b2-11e0-b1ce-0019d1a7ece2 OpenVAS Vulnerability Test $ Description: Auto generated from VID b9281fb9-61b2-11e0-b1ce-0019d1a7ece2 Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

2.6CVSS0.00781EPSS
Exploits1
OpenVAS
OpenVAS
added 2011/05/12 12:0 a.m.15 views

Debian: Security Advisory (DSA-2222-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

2.6CVSS6.5AI score0.00781EPSS
Exploits1References3
OpenVAS
OpenVAS
added 2011/05/12 12:0 a.m.22 views

Debian Security Advisory DSA 2222-1 (tinyproxy)

The remote host is missing an update to tinyproxy announced via advisory DSA 2222-1. OpenVAS Vulnerability Test $Id: deb22221.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2222-1 tinyproxy Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

2.6CVSS6.4AI score0.00781EPSS
Exploits1
OpenVAS
OpenVAS
added 2011/05/12 12:0 a.m.23 views

FreeBSD Ports: tinyproxy

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

2.6CVSS6.4AI score0.00781EPSS
Exploits1References2
seebug.org
seebug.org
added 2011/05/08 12:0 a.m.189 views

Tinyproxy 'conf.c'整数溢出安全绕过漏洞

Bugtraq ID: 47715 CVE ID:CVE-2011-1499 Tinyproxy是一个小型的基于GPL的HTTP/SSL代理程序。 Tinyproxy在子网掩码生成实现上存在一个错误,当配置允许网络段时如"Allow 192.168.0.0/24"相对与默认的"Allow 127.0.0.1",会允许任意IP地址连接,使其成为一个开放代理。如果配置使用一个或多个使用IP段的Allow语句,就会发生这种情况。 Banu Systems Private Limited Tinyproxy 1.8.2 厂商解决方案 Tinyproxy 1.8.3已经修复此漏洞,建议用户下载使用...

2.6CVSS0.4AI score0.00781EPSS
Exploits1
OSV
OSV
added 2011/05/03 12:55 a.m.6 views

CVE-2011-1843

Integer overflow in conf.c in Tinyproxy before 1.8.3 might allow remote attackers to bypass intended access restrictions in opportunistic circumstances via a TCP connection, related to improper handling of invalid port numbers...

7.1AI score
Exploits0References4
OSV
OSV
added 2011/05/03 12:55 a.m.1 views

DEBIAN-CVE-2011-1843

Integer overflow in conf.c in Tinyproxy before 1.8.3 might allow remote attackers to bypass intended access restrictions in opportunistic circumstances via a TCP connection, related to improper handling of invalid port numbers...

6.8CVSS6.8AI score0.00254EPSS
Exploits1References1
NVD
NVD
added 2011/05/03 12:55 a.m.12 views

CVE-2011-1843

Integer overflow in conf.c in Tinyproxy before 1.8.3 might allow remote attackers to bypass intended access restrictions in opportunistic circumstances via a TCP connection, related to improper handling of invalid port numbers...

6.8CVSS6.8AI score0.00254EPSS
Exploits1References3
UbuntuCve
UbuntuCve
added 2011/05/03 12:55 a.m.21 views

CVE-2011-1843

Integer overflow in conf.c in Tinyproxy before 1.8.3 might allow remote attackers to bypass intended access restrictions in opportunistic circumstances via a TCP connection, related to improper handling of invalid port numbers...

6.8CVSS5.9AI score0.00254EPSS
Exploits1References1
Prion
Prion
added 2011/05/03 12:55 a.m.22 views

Integer overflow

Integer overflow in conf.c in Tinyproxy before 1.8.3 might allow remote attackers to bypass intended access restrictions in opportunistic circumstances via a TCP connection, related to improper handling of invalid port numbers...

6.8CVSS7.3AI score0.00254EPSS
Exploits1References3Affected Software1
Debian CVE
Debian CVE
added 2011/05/03 12:3 a.m.24 views

CVE-2011-1843

Integer overflow in conf.c in Tinyproxy before 1.8.3 might allow remote attackers to bypass intended access restrictions in opportunistic circumstances via a TCP connection, related to improper handling of invalid port numbers...

6.8CVSS5.5AI score0.00254EPSS
Exploits1
Cvelist
Cvelist
added 2011/05/03 12:3 a.m.19 views

CVE-2011-1843

Integer overflow in conf.c in Tinyproxy before 1.8.3 might allow remote attackers to bypass intended access restrictions in opportunistic circumstances via a TCP connection, related to improper handling of invalid port numbers...

6.7AI score0.00254EPSS
Exploits1References3
CVE
CVE
added 2011/05/03 12:3 a.m.196 views

CVE-2011-1843

The CVE-2011-1843 issue affects Tinyproxy prior to 1.8.3, where an integer overflow in conf.c can allow remote attackers to bypass access restrictions via a TCP connection (improper handling of invalid port numbers). Public references indicate fixes exist in Tinyproxy 1.8.3 or newer; Fedora/OpenV...

6.8CVSS6.8AI score0.00254EPSS
Exploits1References3Affected Software1
Prion
Prion
added 2011/04/29 10:55 p.m.15 views

Design/Logic Flaw

acl.c in Tinyproxy before 1.8.3, when an Allow configuration setting specifies a CIDR block, permits TCP connections from all IP addresses, which makes it easier for remote attackers to hide the origin of web traffic by leveraging the open HTTP proxy server...

2.6CVSS7AI score0.00781EPSS
Exploits1References9Affected Software2
NVD
NVD
added 2011/04/29 10:55 p.m.11 views

CVE-2011-1499

acl.c in Tinyproxy before 1.8.3, when an Allow configuration setting specifies a CIDR block, permits TCP connections from all IP addresses, which makes it easier for remote attackers to hide the origin of web traffic by leveraging the open HTTP proxy server...

2.6CVSS6.4AI score0.00781EPSS
Exploits1References9
UbuntuCve
UbuntuCve
added 2011/04/29 10:55 p.m.20 views

CVE-2011-1499

acl.c in Tinyproxy before 1.8.3, when an Allow configuration setting specifies a CIDR block, permits TCP connections from all IP addresses, which makes it easier for remote attackers to hide the origin of web traffic by leveraging the open HTTP proxy server...

2.6CVSS5.9AI score0.00781EPSS
Exploits1References2
OSV
OSV
added 2011/04/29 10:55 p.m.1 views

DEBIAN-CVE-2011-1499

acl.c in Tinyproxy before 1.8.3, when an Allow configuration setting specifies a CIDR block, permits TCP connections from all IP addresses, which makes it easier for remote attackers to hide the origin of web traffic by leveraging the open HTTP proxy server...

2.6CVSS6.4AI score0.00781EPSS
Exploits1References1
OSV
OSV
added 2011/04/29 10:55 p.m.3 views

CVE-2011-1499

acl.c in Tinyproxy before 1.8.3, when an Allow configuration setting specifies a CIDR block, permits TCP connections from all IP addresses, which makes it easier for remote attackers to hide the origin of web traffic by leveraging the open HTTP proxy server...

6.3AI score
Exploits0References13
Debian CVE
Debian CVE
added 2011/04/29 10:0 p.m.27 views

CVE-2011-1499

acl.c in Tinyproxy before 1.8.3, when an Allow configuration setting specifies a CIDR block, permits TCP connections from all IP addresses, which makes it easier for remote attackers to hide the origin of web traffic by leveraging the open HTTP proxy server...

2.6CVSS3AI score0.00781EPSS
Exploits1
Rows per page
Query Builder