CVE-2011-1499 in Tinyproxy

Sumário (Inglês)

acl.c in Tinyproxy before 1.8.3, when an Allow configuration setting specifies a CIDR block, permits TCP connections from all IP addresses, which makes it easier for remote attackers to hide the origin of web traffic by leveraging the open HTTP proxy server.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservar

21/03/2011

Divulgação

29/04/2011

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
57268	Banu Tinyproxy HTTP Proxy Server acl.c	16	Não definido	Correção oficial	CVE-2011-1499

Fontes

• MITRE
• NVD
• CVE Details