Back to Database
Status published
High
CVE-2003-1286
HTTP Proxy in Sambar Server before 6.0 beta 6, when...
Vulnerability Description
HTTP Proxy in Sambar Server before 6.0 beta 6, when security.ini lacks a 127.0.0.1 proxydeny entry, allows remote attackers to send proxy HTTP requests to the Sambar Server's administrative interface and external web servers, by making a "Connection: keep-alive" request before the proxy requests.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2003-1286
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.sambar.com/security.htm
- http://www.securityfocus.com/bid/10256
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16054
- http://secunia.com/advisories/9578
- http://securitytracker.com/id?1007819
- http://www.idefense.com/application/poi/display?id=103&type=vulnerabilities&flashstatus=true
- http://archives.neohapsis.com/archives/bugtraq/2004-04/0353.html
More from sambar
View All →CVE-2006-6624
The FTP Server in Sambar Server 6.4 allows remote authenticated...
Medium
4
CVE-2005-3506
Cross-site scripting (XSS) vulnerability in proxy.asp in Sambar Server 6.3...
Medium
4.3
CVE-2004-2565
Multiple directory traversal vulnerabilities in Sambar Server 6.1 Beta 2...
Medium
5
CVE-2004-2564
Multiple cross-site scripting (XSS) vulnerabilities in Sambar Server 6.1 Beta...
Medium
4.3
CVE-2004-2086
Stack-based buffer overflow in results.stm for Sambar Server before the...
Medium
5
Affected Vendor
sambar
View all reports →Affected Software
sambar server
Vulnerable Versions:
5.0, 5.1, 5.2, 5.3, 6.0
Timeline
Official Publish:
November 22nd, 2005
Last Modified:
August 8th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.