acl.c in Tinyproxy prior to 1.8.3, when an Allow configuration setting specifies a CIDR block, permits TCP connections from all IP addresses, which makes it easier for remote malicious users to hide the origin of web traffic by leveraging the open HTTP proxy server.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
banu tinyproxy 1.7.1 |
||
banu tinyproxy 1.7.0 |
||
banu tinyproxy 1.6.0 |
||
banu tinyproxy 1.5.0 |
||
banu tinyproxy 1.5.1 |
||
banu tinyproxy |
||
banu tinyproxy 1.6.2 |
||
banu tinyproxy 1.5.3 |
||
banu tinyproxy 1.8.1 |
||
banu tinyproxy 1.8.0 |
||
banu tinyproxy 1.6.4 |
||
banu tinyproxy 1.6.3 |
||
banu tinyproxy 1.6.5 |
||
banu tinyproxy 1.6.1 |
||
banu tinyproxy 1.5.2 |
||
debian debian linux 6.0 |