cbcvebase.
CVE-1999-0710
published 1999-07-25

CVE-1999-0710: The Squid package in Red Hat Linux 5.2 and 6.0, and other distributions, installs cachemgr.cgi in a public web directory, which allows remote attackers to use…

PriorityP336high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
11.60%
95.6th percentile
The Squid package in Red Hat Linux 5.2 and 6.0, and other distributions, installs cachemgr.cgi in a public web directory, which allows remote attackers to use it as an intermediary to connect to other systems.

Affected

7 ranges
VendorProductVersion rangeFixed in
debiansquid< squid 2.5.7-1 (bookworm)squid 2.5.7-1 (bookworm)
redhatlinux
redhatlinux
squidsquid>= 0 < 2.5.7-12.5.7-1
squidsquid>= 0 < 2.5.7-12.5.7-1
squidsquid>= 0 < 2.5.7-12.5.7-1
squidsquid>= 0 < 2.5.7-12.5.7-1

CVSS provenance

nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv7.5HIGH
vendor_debian7.5HIGH
vendor_redhat7.5HIGH
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.