cbcvebase.
CVE-2001-1030
published 2001-07-18

CVE-2001-1030: Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists (ACLs) when the httpd_accel_host and http_accel_with_proxy off settings…

high7.5CVSS 3.1
AVNACLAuNCPIPAP
Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists (ACLs) when the httpd_accel_host and http_accel_with_proxy off settings are used, which allows attackers to bypass the ACLs and conduct unauthorized activities such as port scanning.

Affected

15 ranges
VendorProductVersion rangeFixed in
calderaopenlinux_server
immuniximmunix
immuniximmunix
immuniximmunix
mandrakesoftmandrake_linux
mandrakesoftmandrake_linux
mandrakesoftmandrake_linux
mandrakesoftmandrake_linux_corporate_server
mandrakesoftmandrake_single_network_firewall
redhatlinux
squidsquid_web_proxy
squidsquid_web_proxy
trustixsecure_linux
trustixsecure_linux
trustixsecure_linux