Description
The Squid package in Red Hat Linux 5.2 and 6.0, and other distributions, installs cachemgr.cgi in a public web directory, which allows remote attackers to use it as an intermediary to connect to other systems.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.redhat.com/archives/fedora-announce-list/2005-May/msg00025.html ↗
- http://fedoranews.org/updates/FEDORA--.shtml ↗
- http://www.redhat.com/support/errata/RHSA-2005-489.html ↗
- http://www.securityfocus.com/bid/2059 ↗
- http://www.debian.org/security/2004/dsa-576 ↗
- http://www.redhat.com/support/errata/RHSA-1999-025.html ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/2385 ↗
- http://www.redhat.com/support/errata/archives/rh52-errata-general.html#squid ↗