CVEvulnerability

CVE-2002-0778

7.5 HIGH Published 2002-08-12 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2002-08-12
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

The default configuration of the proxy for Cisco Cache Engine and Content Engine allows remote attackers to use HTTPS to make TCP connections to allowed IP addresses while hiding the actual source IP.

Affected configurations

• cisco content distribution manager 4630 • cisco content distribution manager 4630 4.0 • cisco content distribution manager 4630 4.1 • cisco content distribution manager 4650 • cisco content distribution manager 4650 4.0 • cisco content distribution manager 4650 4.1 • cisco content engine 507 • cisco content engine 507 2.2.0 • cisco content engine 507 3.1 • cisco content engine 507 4.0 • cisco content engine 507 4.1 • cisco content engine 560 • cisco content engine 560 2.2.0 • cisco content engine 560 3.1 • cisco content engine 560 4.0 • cisco content engine 560 4.1 • cisco content engine 590 • cisco content engine 590 2.2.0 • cisco content engine 590 3.1 • cisco content engine 590 4.0 • cisco content engine 590 4.1 • cisco content engine 7320 • cisco content engine 7320 2.2.0 • cisco content engine 7320 3.1 • cisco content engine 7320 4.0 • cisco content engine 7320 4.1 • cisco enterprise content delivery network software 4.0 • cisco enterprise content delivery network software 4.1 • cisco cache engine 505 2.4.0 • cisco cache engine 505 3.0 • cisco cache engine 550 • cisco cache engine 550 2.2.0 • cisco cache engine 550 2.4.0 • cisco cache engine 550 3.0 • cisco cache engine 570 2.2.0 • cisco cache engine 570 2.4.0 • cisco cache engine 570 3.0 • cisco cache engine 570 570 • cisco content router 4430

References