CVEvulnerability
CVE-2011-1499
2.6 LOW
Official page ↗
- Status
- Modified
- Published
- 2011-04-29
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.6 LOW — AV:N/AC:H/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-16
Description
acl.c in Tinyproxy before 1.8.3, when an Allow configuration setting specifies a CIDR block, permits TCP connections from all IP addresses, which makes it easier for remote attackers to hide the origin of web traffic by leveraging the open HTTP proxy server.
Affected configurations
• banu tinyproxy (<= 1.8.2)
• banu tinyproxy 1.5.0
• banu tinyproxy 1.5.1
• banu tinyproxy 1.5.2
• banu tinyproxy 1.5.3
• banu tinyproxy 1.6.0
• banu tinyproxy 1.6.1
• banu tinyproxy 1.6.2
• banu tinyproxy 1.6.3
• banu tinyproxy 1.6.4
• banu tinyproxy 1.6.5
• banu tinyproxy 1.7.0
• banu tinyproxy 1.7.1
• banu tinyproxy 1.8.0
• banu tinyproxy 1.8.1
• debian debian linux 6.0
Related
Weakness · not in database (1)
References
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=621493 Issue Tracking, Patch
- http://openwall.com/lists/oss-security/2011/04/07/9 Mailing List, Third Party Advisory
- http://openwall.com/lists/oss-security/2011/04/08/3 Mailing List, Third Party Advisory
- http://secunia.com/advisories/44274 secunia.com
- http://www.debian.org/security/2011/dsa-2222 Third Party Advisory
- https://banu.com/bugzilla/show_bug.cgi?id=90 Broken Link
- https://banu.com/cgit/tinyproxy/diff/?id=e8426f6662dc467bd1d827100481b95d9a4a23e4 Broken Link
- https://bugzilla.redhat.com/show_bug.cgi?id=694658 Issue Tracking, Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67256 exchange.xforce.ibmcloud.com
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=621493 Issue Tracking, Patch
- http://openwall.com/lists/oss-security/2011/04/07/9 Mailing List, Third Party Advisory
- http://openwall.com/lists/oss-security/2011/04/08/3 Mailing List, Third Party Advisory
- http://secunia.com/advisories/44274 secunia.com
- http://www.debian.org/security/2011/dsa-2222 Third Party Advisory
- https://banu.com/bugzilla/show_bug.cgi?id=90 Broken Link
- https://banu.com/cgit/tinyproxy/diff/?id=e8426f6662dc467bd1d827100481b95d9a4a23e4 Broken Link
- https://bugzilla.redhat.com/show_bug.cgi?id=694658 Issue Tracking, Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67256 exchange.xforce.ibmcloud.com