CVE-2001-1030

published 2001-07-18

CVE-2001-1030: Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists (ACLs) when the httpd_accel_host and http_accel_with_proxy off settings…

Priority P4 25 high 7.5 CVSS 2.0

AV N AC L Au N C P I P A P

Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists (ACLs) when the httpd_accel_host and http_accel_with_proxy off settings are used, which allows attackers to bypass the ACLs and conduct unauthorized activities such as port scanning.

Affected

15 ranges

Vendor	Product	Version range	Fixed in
caldera	openlinux_server	—	—
immunix	immunix	—	—
immunix	immunix	—	—
immunix	immunix	—	—
mandrakesoft	mandrake_linux	—	—
mandrakesoft	mandrake_linux	—	—
mandrakesoft	mandrake_linux	—	—
mandrakesoft	mandrake_linux_corporate_server	—	—
mandrakesoft	mandrake_single_network_firewall	—	—
redhat	linux	—	—
squid	squid_web_proxy	—	—
squid	squid_web_proxy	—	—
trustix	secure_linux	—	—
trustix	secure_linux	—	—
trustix	secure_linux	—	—

CVSS provenance

nvd v2.0 7.5 HIGH AV:N/AC:L/Au:N/C:P/I:P/A:P

vendor_redhat 7.5 HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.