CVE-2011-1499
First published: Thu Apr 07 2011(Updated: )
acl.c in Tinyproxy before 1.8.3, when an Allow configuration setting specifies a CIDR block, permits TCP connections from all IP addresses, which makes it easier for remote attackers to hide the origin of web traffic by leveraging the open HTTP proxy server.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Banu Tinyproxy | =1.7.1 | |
| Banu Tinyproxy | =1.6.0-pre4 | |
| Banu Tinyproxy | =1.5.0-rc6 | |
| Banu Tinyproxy | =1.6.0-rc2 | |
| Banu Tinyproxy | =1.5.2 | |
| Banu Tinyproxy | =1.6.5 | |
| Banu Tinyproxy | =1.5.1-pre5 | |
| Banu Tinyproxy | =1.5.0-rc8 | |
| Banu Tinyproxy | =1.6.0-pre2 | |
| Banu Tinyproxy | =1.6.0-a | |
| Banu Tinyproxy | =1.5.0-pre6 | |
| Banu Tinyproxy | =1.5.0-pre5 | |
| Banu Tinyproxy | =1.5.1-pre2 | |
| Banu Tinyproxy | =1.5.3 | |
| Banu Tinyproxy | =1.5.0-rc9 | |
| Banu Tinyproxy | =1.5.1 | |
| Banu Tinyproxy | =1.6.1 | |
| Banu Tinyproxy | =1.5.1-rc3 | |
| Banu Tinyproxy | =1.5.0-rc1 | |
| Banu Tinyproxy | =1.6.4 | |
| Banu Tinyproxy | =1.5.0-rc7 | |
| Banu Tinyproxy | =1.5.2-rc1 | |
| Banu Tinyproxy | =1.7.0 | |
| Banu Tinyproxy | =1.5.0-pre2 | |
| Banu Tinyproxy | =1.5.0-pre3 | |
| Banu Tinyproxy | =1.5.0-rc10 | |
| Banu Tinyproxy | =1.6.0-pre3 | |
| Banu Tinyproxy | =1.8.0 | |
| Banu Tinyproxy | =1.5.3-rc1 | |
| Banu Tinyproxy | =1.5.1-pre6 | |
| Banu Tinyproxy | =1.5.0 | |
| Banu Tinyproxy | =1.6.0-pre1 | |
| Banu Tinyproxy | =1.5.0-pre1 | |
| Banu Tinyproxy | =1.5.1-rc4 | |
| Banu Tinyproxy | =1.6.2 | |
| Banu Tinyproxy | =1.5.1-pre1 | |
| Banu Tinyproxy | =1.6.0-rc3 | |
| Banu Tinyproxy | =1.5.0-rc2 | |
| Banu Tinyproxy | =1.5.1-rc2 | |
| Banu Tinyproxy | =1.5.2-rc2 | |
| Banu Tinyproxy | =1.6.3 | |
| Banu Tinyproxy | =1.5.1-rc1 | |
| Banu Tinyproxy | =1.8.1 | |
| Banu Tinyproxy | =1.5.0-rc5 | |
| Banu Tinyproxy | =1.5.0-rc4 | |
| Banu Tinyproxy | =1.5.1-pre3 | |
| Banu Tinyproxy | =1.5.1-pre4 | |
| Banu Tinyproxy | =1.6.0-rc1 | |
| Banu Tinyproxy | <=1.8.2 | |
| Banu Tinyproxy | =1.6.0 | |
| Banu Tinyproxy | =1.5.0-pre4 | |
| Debian Debian Linux | =6.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://openwall.com/lists/oss-security/2011/04/07/9
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=621493
- http://openwall.com/lists/oss-security/2011/04/08/3
- https://banu.com/cgit/tinyproxy/diff/?id=e8426f6662dc467bd1d827100481b95d9a4a23e4
- https://banu.com/bugzilla/show_bug.cgi?id=90
- http://www.debian.org/security/2011/dsa-2222
- https://bugzilla.redhat.com/show_bug.cgi?id=694658
- http://secunia.com/advisories/44274
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67256
- https://banu.com/cgit/tinyproxy/commit/?id=e8426f6662dc467bd1d827100481b95d9a4a23e4
- https://access.redhat.com/security/cve/CVE-2011-1499
- https://access.redhat.com/security/cve/CVE-2011-1843
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1843
- https://banu.com/cgit/tinyproxy/diff/?id=97b9984484299b2ce72f8f4fc3706dab8a3a8439
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=701687
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=701688
- collector/nvd-historical
- collector/nvd-index
- agent/type
- agent/first-publish-date
- agent/softwarecombine
- agent/remedy
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/author
- agent/weakness
- agent/references
- agent/event
- agent/description
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2011-1499
- agent/tags
- agent/trending
- vendor/banu
- canonical/banu tinyproxy
- version/banu tinyproxy/1.7.1
- version/banu tinyproxy/1.6.0-pre4
- version/banu tinyproxy/1.5.0-rc6
- version/banu tinyproxy/1.6.0-rc2
- version/banu tinyproxy/1.5.2
- version/banu tinyproxy/1.6.5
- version/banu tinyproxy/1.5.1-pre5
- version/banu tinyproxy/1.5.0-rc8
- version/banu tinyproxy/1.6.0-pre2
- version/banu tinyproxy/1.6.0-a
- version/banu tinyproxy/1.5.0-pre6
- version/banu tinyproxy/1.5.0-pre5
- version/banu tinyproxy/1.5.1-pre2
- version/banu tinyproxy/1.5.3
- version/banu tinyproxy/1.5.0-rc9
- version/banu tinyproxy/1.5.1
- version/banu tinyproxy/1.6.1
- version/banu tinyproxy/1.5.1-rc3
- version/banu tinyproxy/1.5.0-rc1
- version/banu tinyproxy/1.6.4
- version/banu tinyproxy/1.5.0-rc7
- version/banu tinyproxy/1.5.2-rc1
- version/banu tinyproxy/1.7.0
- version/banu tinyproxy/1.5.0-pre2
- version/banu tinyproxy/1.5.0-pre3
- version/banu tinyproxy/1.5.0-rc10
- version/banu tinyproxy/1.6.0-pre3
- version/banu tinyproxy/1.8.0
- version/banu tinyproxy/1.5.3-rc1
- version/banu tinyproxy/1.5.1-pre6
- version/banu tinyproxy/1.5.0
- version/banu tinyproxy/1.6.0-pre1
- version/banu tinyproxy/1.5.0-pre1
- version/banu tinyproxy/1.5.1-rc4
- version/banu tinyproxy/1.6.2
- version/banu tinyproxy/1.5.1-pre1
- version/banu tinyproxy/1.6.0-rc3
- version/banu tinyproxy/1.5.0-rc2
- version/banu tinyproxy/1.5.1-rc2
- version/banu tinyproxy/1.5.2-rc2
- version/banu tinyproxy/1.6.3
- version/banu tinyproxy/1.5.1-rc1
- version/banu tinyproxy/1.8.1
- version/banu tinyproxy/1.5.0-rc5
- version/banu tinyproxy/1.5.0-rc4
- version/banu tinyproxy/1.5.1-pre3
- version/banu tinyproxy/1.5.1-pre4
- version/banu tinyproxy/1.6.0-rc1
- version/banu tinyproxy/1.8.2
- version/banu tinyproxy/1.6.0
- version/banu tinyproxy/1.5.0-pre4
- vendor/debian
- canonical/debian debian linux
- version/debian debian linux/6.0