Back to Database
Status published
High
CVE-2001-1030
Squid before 2.3STABLE5 in HTTP accelerator mode does not enable...
Vulnerability Description
Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists (ACLs) when the httpd_accel_host and http_accel_with_proxy off settings are used, which allows attackers to bypass the ACLs and conduct unauthorized activities such as port scanning.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2001-1030
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.securityfocus.com/archive/1/197727
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6862
- http://www.redhat.com/support/errata/RHSA-2001-097.html
- http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-031-01
- http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-066.php3
- http://www.calderasystems.com/support/security/advisories/CSSA-2001-029.0.txt
- http://archives.neohapsis.com/archives/bugtraq/2001-07/0362.html
More from caldera
View All →CVE-2014-2936
The directory manager in Caldera 9.20 allows remote attackers to...
High
7.5
CVE-2014-2935
costview3/xmlrpc_server/xmlrpc.php in CostView in Caldera 9.20 allows remote attackers to...
Critical
10
CVE-2014-2934
Multiple SQL injection vulnerabilities in Caldera 9.20 allow remote attackers...
High
7.5
CVE-2014-2933
Directory traversal vulnerability in dirmng/index.php in Caldera 9.20 allows remote...
Medium
5
CVE-2003-0658
Docview before 1.1-18 in Caldera OpenLinux 3.1.1, SCO Linux 4.0,...
Medium
5
Affected Vendor
caldera
View all reports →Affected Software
openlinux server, immunix, mandrake single network firewall, squid web proxy, mandrake linux, mandrake linux corporate server, linux, secure linux
Vulnerable Versions:
3.1, 6.2, 7.0, 7.0_beta, 7.2, 2.3stable3, 2.3stable4, 7.1, 8.0, 1.0.1, 1.1, 1.01, 1.2
Timeline
Official Publish:
June 25th, 2002
Last Modified:
August 8th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.