Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-1499
HistoryApr 29, 2011 - 12:00 a.m.

CVE-2011-1499

2011-04-2900:00:00
ubuntu.com
ubuntu.com
7

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

0.004 Low

EPSS

Percentile

74.6%

acl.c in Tinyproxy before 1.8.3, when an Allow configuration setting
specifies a CIDR block, permits TCP connections from all IP addresses,
which makes it easier for remote attackers to hide the origin of web
traffic by leveraging the open HTTP proxy server.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu10.10noarchtinyproxy< 1.8.2-1squeeze1build0.10.10.1UNKNOWN
ubuntu11.04noarchtinyproxy< 1.8.2-1squeeze1build0.11.04.1UNKNOWN

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

0.004 Low

EPSS

Percentile

74.6%