Unscored CVE-2001-1030 EUVD-2001-1011GHSA-g8hh-whpr-gfp2

Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists (ACLs) when the httpd_accel_host and http_accel_with_…

Published Jun 25, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists (ACLs) when the httpd_accel_host and http_accel_with_proxy off settings are used, which allows attackers to bypass the ACLs and conduct unauthorized activities such as port scanning.

References

20010718 Squid httpd acceleration acl bug enables portscanning mailing-list
squid-http-accelerator-portscanning(6862) vdb-entry
RHSA-2001:097 vendor-advisory
IMNX-2001-70-031-01 vendor-advisory
MDKSA-2001:066 vendor-advisory
CSSA-2001-029.0 vendor-advisory
20010719 TSLSA-2001-0013 - Squid mailing-list