CVEvulnerability
CVE-2005-2729
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-08-30
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
The HTTP proxy in Astaro Security Linux 6.0 does not properly filter HTTP CONNECT requests to localhost, which allows remote attackers to bypass firewall rules and connect to local services.
Affected configurations
• astaro security linux 6.001
References
- http://marc.info/?l=bugtraq&m=112501186602731&w=2 marc.info
- http://secunia.com/advisories/16578/ Vendor Advisory
- http://www.securityfocus.com/bid/14665 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22021 exchange.xforce.ibmcloud.com
- http://marc.info/?l=bugtraq&m=112501186602731&w=2 marc.info
- http://secunia.com/advisories/16578/ Vendor Advisory
- http://www.securityfocus.com/bid/14665 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22021 exchange.xforce.ibmcloud.com