Published: 25/07/1999 Updated: 03/05/2018

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 755

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

The Squid package in Red Hat Linux 5.2 and 6.0, and other distributions, installs cachemgr.cgi in a public web directory, which allows remote malicious users to use it as an intermediary to connect to other systems.

Vulnerable Product	Search on Vulmon	Subscribe to Product
redhat linux 6.0
redhat linux 5.2

Synopsis squid security update Type/Severity Security Advisory: Low Topic An updated squid package that fixes several security issues is now availableThis update has been rated as having low security impact by the Red HatSecurity Response Team Description Squid is a full-featured Web prox ...

Several security vulnerabilities have been discovered in Squid, the internet object cache, the popular WWW proxy cache The Common Vulnerabilities and Exposures project identifies the following problems: CVE-1999-0710 It is possible to bypass access lists and scan arbitrary hosts and ports in the network through cachemgrcgi, which is inst ...

source: wwwsecurityfocuscom/bid/2059/info The 'cachemgrcgi' module is a management interface for the Squid proxy service It was installed by default in '/cgi-bin' by Red Hat Linux 52 and 60 installed with Squid This script prompts for a host and port, which it then tries to connect to If a webserver such as Apache is running, this c ...

NVD-CWE-Other http://www.redhat.com/support/errata/archives/rh52-errata-general.html#squid http://www.debian.org/security/2004/dsa-576 http://www.redhat.com/archives/fedora-announce-list/2005-May/msg00025.html http://fedoranews.org/updates/FEDORA--.shtml http://www.redhat.com/support/errata/RHSA-1999-025.html http://www.redhat.com/support/errata/RHSA-2005-489.html http://www.securityfocus.com/bid/2059 https://exchange.xforce.ibmcloud.com/vulnerabilities/2385 https://access.redhat.com/errata/RHSA-2005:489 https://nvd.nist.gov https://www.exploit-db.com/exploits/20465/https://www.debian.org/security/./dsa-576

CVE-1999-0710

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect