CVEvulnerability

CVE-2001-1030

7.5 HIGH Published 2001-07-18 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2001-07-18
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists (ACLs) when the httpd_accel_host and http_accel_with_proxy off settings are used, which allows attackers to bypass the ACLs and conduct unauthorized activities such as port scanning.

Affected configurations

• caldera openlinux server 3.1 • immunix immunix 6.2 • immunix immunix 7.0 • immunix immunix 7.0 beta • mandrakesoft mandrake single network firewall 7.2 • squid squid web proxy 2.3stable3 • squid squid web proxy 2.3stable4 • mandrakesoft mandrake linux 7.1 • mandrakesoft mandrake linux 7.2 • mandrakesoft mandrake linux 8.0 • mandrakesoft mandrake linux corporate server 1.0.1 • redhat linux 7.0 • trustix secure linux 1.1 • trustix secure linux 1.01 • trustix secure linux 1.2

References