CVE-2001-1030

No fix known EPSS 2%

Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists (ACLs) when the httpd_accel_host and http_accel_with_proxy off settings are used, which allows attackers to bypass the ACLs and conduct unauthorized activities such as port scanning.

Published 2002-06-25 · CVE record · OSV

Products: caldera openlinux_server, immunix, mandrakesoft mandrake_single_network_firewall, squid_web_proxy, mandrakesoft mandrake_linux, mandrakesoft mandrake_linux_corporate_server, redhat linux, trustix secure_linux