CVE-2011-1499
Severity Score
2.6
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
acl.c in Tinyproxy before 1.8.3, when an Allow configuration setting specifies a CIDR block, permits TCP connections from all IP addresses, which makes it easier for remote attackers to hide the origin of web traffic by leveraging the open HTTP proxy server.
acl.c en tinyproxy antes de v1.8.3, cuando la opcion "Allow Configuration" especifica un bloque CIDR, permite conexiones TCP desde todas las direcciones IP, lo que facilita a los atacantes remotos a la hora de ocultar el origen del tráfico de Internet, aprovechando la servidor proxy HTTP abierto.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2011-03-21 CVE Reserved
- 2011-04-20 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-16: Configuration
CAPEC
References (9)
| URL | Tag | Source |
|---|---|---|
| http://openwall.com/lists/oss-security/2011/04/07/9 | Mailing List | |
| http://openwall.com/lists/oss-security/2011/04/08/3 | Mailing List | |
| http://secunia.com/advisories/44274 | Third Party Advisory | |
| https://banu.com/bugzilla/show_bug.cgi?id=90 | Broken Link | |
| https://banu.com/cgit/tinyproxy/diff/?id=e8426f6662dc467bd1d827100481b95d9a4a23e4 | Broken Link | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/67256 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=621493 | 2017-08-17 | |
| https://bugzilla.redhat.com/show_bug.cgi?id=694658 | 2017-08-17 |
| URL | Date | SRC |
|---|---|---|
| http://www.debian.org/security/2011/dsa-2222 | 2017-08-17 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Banu Search vendor "Banu" | Tinyproxy Search vendor "Banu" for product "Tinyproxy" | <= 1.8.2 Search vendor "Banu" for product "Tinyproxy" and version " <= 1.8.2" | - |
Affected
| ||||||
| Banu Search vendor "Banu" | Tinyproxy Search vendor "Banu" for product "Tinyproxy" | 1.5.0 Search vendor "Banu" for product "Tinyproxy" and version "1.5.0" | - |
Affected
| ||||||
| Banu Search vendor "Banu" | Tinyproxy Search vendor "Banu" for product "Tinyproxy" | 1.5.0 Search vendor "Banu" for product "Tinyproxy" and version "1.5.0" | pre1 |
Affected
| ||||||
| Banu Search vendor "Banu" | Tinyproxy Search vendor "Banu" for product "Tinyproxy" | 1.5.0 Search vendor "Banu" for product "Tinyproxy" and version "1.5.0" | pre2 |
Affected
| ||||||
| Banu Search vendor "Banu" | Tinyproxy Search vendor "Banu" for product "Tinyproxy" | 1.5.0 Search vendor "Banu" for product "Tinyproxy" and version "1.5.0" | pre3 |
Affected
| ||||||
| Banu Search vendor "Banu" | Tinyproxy Search vendor "Banu" for product "Tinyproxy" | 1.5.0 Search vendor "Banu" for product "Tinyproxy" and version "1.5.0" | pre4 |
Affected
| ||||||
| Banu Search vendor "Banu" | Tinyproxy Search vendor "Banu" for product "Tinyproxy" | 1.5.0 Search vendor "Banu" for product "Tinyproxy" and version "1.5.0" | pre5 |
Affected
| ||||||
| Banu Search vendor "Banu" | Tinyproxy Search vendor "Banu" for product "Tinyproxy" | 1.5.0 Search vendor "Banu" for product "Tinyproxy" and version "1.5.0" | pre6 |
Affected
| ||||||
| Banu Search vendor "Banu" | Tinyproxy Search vendor "Banu" for product "Tinyproxy" | 1.5.0 Search vendor "Banu" for product "Tinyproxy" and version "1.5.0" | rc1 |
Affected
| ||||||
| Banu Search vendor "Banu" | Tinyproxy Search vendor "Banu" for product "Tinyproxy" | 1.5.0 Search vendor "Banu" for product "Tinyproxy" and version "1.5.0" | rc10 |
Affected
| ||||||
| Banu Search vendor "Banu" | Tinyproxy Search vendor "Banu" for product "Tinyproxy" | 1.5.0 Search vendor "Banu" for product "Tinyproxy" and version "1.5.0" | rc2 |
Affected
| ||||||
| Banu Search vendor "Banu" | Tinyproxy Search vendor "Banu" for product "Tinyproxy" | 1.5.0 Search vendor "Banu" for product "Tinyproxy" and version "1.5.0" | rc4 |
Affected
| ||||||
| Banu Search vendor "Banu" | Tinyproxy Search vendor "Banu" for product "Tinyproxy" | 1.5.0 Search vendor "Banu" for product "Tinyproxy" and version "1.5.0" | rc5 |
Affected
| ||||||
| Banu Search vendor "Banu" | Tinyproxy Search vendor "Banu" for product "Tinyproxy" | 1.5.0 Search vendor "Banu" for product "Tinyproxy" and version "1.5.0" | rc6 |
Affected
| ||||||
| Banu Search vendor "Banu" | Tinyproxy Search vendor "Banu" for product "Tinyproxy" | 1.5.0 Search vendor "Banu" for product "Tinyproxy" and version "1.5.0" | rc7 |
Affected
| ||||||
| Banu Search vendor "Banu" | Tinyproxy Search vendor "Banu" for product "Tinyproxy" | 1.5.0 Search vendor "Banu" for product "Tinyproxy" and version "1.5.0" | rc8 |
Affected
| ||||||
| Banu Search vendor "Banu" | Tinyproxy Search vendor "Banu" for product "Tinyproxy" | 1.5.0 Search vendor "Banu" for product "Tinyproxy" and version "1.5.0" | rc9 |
Affected
| ||||||
| Banu Search vendor "Banu" | Tinyproxy Search vendor "Banu" for product "Tinyproxy" | 1.5.1 Search vendor "Banu" for product "Tinyproxy" and version "1.5.1" | - |
Affected
| ||||||
| Banu Search vendor "Banu" | Tinyproxy Search vendor "Banu" for product "Tinyproxy" | 1.5.1 Search vendor "Banu" for product "Tinyproxy" and version "1.5.1" | pre1 |
Affected
| ||||||
| Banu Search vendor "Banu" | Tinyproxy Search vendor "Banu" for product "Tinyproxy" | 1.5.1 Search vendor "Banu" for product "Tinyproxy" and version "1.5.1" | pre2 |
Affected
| ||||||
| Banu Search vendor "Banu" | Tinyproxy Search vendor "Banu" for product "Tinyproxy" | 1.5.1 Search vendor "Banu" for product "Tinyproxy" and version "1.5.1" | pre3 |
Affected
| ||||||
| Banu Search vendor "Banu" | Tinyproxy Search vendor "Banu" for product "Tinyproxy" | 1.5.1 Search vendor "Banu" for product "Tinyproxy" and version "1.5.1" | pre4 |
Affected
| ||||||
| Banu Search vendor "Banu" | Tinyproxy Search vendor "Banu" for product "Tinyproxy" | 1.5.1 Search vendor "Banu" for product "Tinyproxy" and version "1.5.1" | pre5 |
Affected
| ||||||
| Banu Search vendor "Banu" | Tinyproxy Search vendor "Banu" for product "Tinyproxy" | 1.5.1 Search vendor "Banu" for product "Tinyproxy" and version "1.5.1" | pre6 |
Affected
| ||||||
| Banu Search vendor "Banu" | Tinyproxy Search vendor "Banu" for product "Tinyproxy" | 1.5.1 Search vendor "Banu" for product "Tinyproxy" and version "1.5.1" | rc1 |
Affected
| ||||||
| Banu Search vendor "Banu" | Tinyproxy Search vendor "Banu" for product "Tinyproxy" | 1.5.1 Search vendor "Banu" for product "Tinyproxy" and version "1.5.1" | rc2 |
Affected
| ||||||
| Banu Search vendor "Banu" | Tinyproxy Search vendor "Banu" for product "Tinyproxy" | 1.5.1 Search vendor "Banu" for product "Tinyproxy" and version "1.5.1" | rc3 |
Affected
| ||||||
| Banu Search vendor "Banu" | Tinyproxy Search vendor "Banu" for product "Tinyproxy" | 1.5.1 Search vendor "Banu" for product "Tinyproxy" and version "1.5.1" | rc4 |
Affected
| ||||||
| Banu Search vendor "Banu" | Tinyproxy Search vendor "Banu" for product "Tinyproxy" | 1.5.2 Search vendor "Banu" for product "Tinyproxy" and version "1.5.2" | - |
Affected
| ||||||
| Banu Search vendor "Banu" | Tinyproxy Search vendor "Banu" for product "Tinyproxy" | 1.5.2 Search vendor "Banu" for product "Tinyproxy" and version "1.5.2" | rc1 |
Affected
| ||||||
| Banu Search vendor "Banu" | Tinyproxy Search vendor "Banu" for product "Tinyproxy" | 1.5.2 Search vendor "Banu" for product "Tinyproxy" and version "1.5.2" | rc2 |
Affected
| ||||||
| Banu Search vendor "Banu" | Tinyproxy Search vendor "Banu" for product "Tinyproxy" | 1.5.3 Search vendor "Banu" for product "Tinyproxy" and version "1.5.3" | - |
Affected
| ||||||
| Banu Search vendor "Banu" | Tinyproxy Search vendor "Banu" for product "Tinyproxy" | 1.5.3 Search vendor "Banu" for product "Tinyproxy" and version "1.5.3" | rc1 |
Affected
| ||||||
| Banu Search vendor "Banu" | Tinyproxy Search vendor "Banu" for product "Tinyproxy" | 1.6.0 Search vendor "Banu" for product "Tinyproxy" and version "1.6.0" | - |
Affected
| ||||||
| Banu Search vendor "Banu" | Tinyproxy Search vendor "Banu" for product "Tinyproxy" | 1.6.0 Search vendor "Banu" for product "Tinyproxy" and version "1.6.0" | a |
Affected
| ||||||
| Banu Search vendor "Banu" | Tinyproxy Search vendor "Banu" for product "Tinyproxy" | 1.6.0 Search vendor "Banu" for product "Tinyproxy" and version "1.6.0" | pre1 |
Affected
| ||||||
| Banu Search vendor "Banu" | Tinyproxy Search vendor "Banu" for product "Tinyproxy" | 1.6.0 Search vendor "Banu" for product "Tinyproxy" and version "1.6.0" | pre2 |
Affected
| ||||||
| Banu Search vendor "Banu" | Tinyproxy Search vendor "Banu" for product "Tinyproxy" | 1.6.0 Search vendor "Banu" for product "Tinyproxy" and version "1.6.0" | pre3 |
Affected
| ||||||
| Banu Search vendor "Banu" | Tinyproxy Search vendor "Banu" for product "Tinyproxy" | 1.6.0 Search vendor "Banu" for product "Tinyproxy" and version "1.6.0" | pre4 |
Affected
| ||||||
| Banu Search vendor "Banu" | Tinyproxy Search vendor "Banu" for product "Tinyproxy" | 1.6.0 Search vendor "Banu" for product "Tinyproxy" and version "1.6.0" | rc1 |
Affected
| ||||||
| Banu Search vendor "Banu" | Tinyproxy Search vendor "Banu" for product "Tinyproxy" | 1.6.0 Search vendor "Banu" for product "Tinyproxy" and version "1.6.0" | rc2 |
Affected
| ||||||
| Banu Search vendor "Banu" | Tinyproxy Search vendor "Banu" for product "Tinyproxy" | 1.6.0 Search vendor "Banu" for product "Tinyproxy" and version "1.6.0" | rc3 |
Affected
| ||||||
| Banu Search vendor "Banu" | Tinyproxy Search vendor "Banu" for product "Tinyproxy" | 1.6.1 Search vendor "Banu" for product "Tinyproxy" and version "1.6.1" | - |
Affected
| ||||||
| Banu Search vendor "Banu" | Tinyproxy Search vendor "Banu" for product "Tinyproxy" | 1.6.2 Search vendor "Banu" for product "Tinyproxy" and version "1.6.2" | - |
Affected
| ||||||
| Banu Search vendor "Banu" | Tinyproxy Search vendor "Banu" for product "Tinyproxy" | 1.6.3 Search vendor "Banu" for product "Tinyproxy" and version "1.6.3" | - |
Affected
| ||||||
| Banu Search vendor "Banu" | Tinyproxy Search vendor "Banu" for product "Tinyproxy" | 1.6.4 Search vendor "Banu" for product "Tinyproxy" and version "1.6.4" | - |
Affected
| ||||||
| Banu Search vendor "Banu" | Tinyproxy Search vendor "Banu" for product "Tinyproxy" | 1.6.5 Search vendor "Banu" for product "Tinyproxy" and version "1.6.5" | - |
Affected
| ||||||
| Banu Search vendor "Banu" | Tinyproxy Search vendor "Banu" for product "Tinyproxy" | 1.7.0 Search vendor "Banu" for product "Tinyproxy" and version "1.7.0" | - |
Affected
| ||||||
| Banu Search vendor "Banu" | Tinyproxy Search vendor "Banu" for product "Tinyproxy" | 1.7.1 Search vendor "Banu" for product "Tinyproxy" and version "1.7.1" | - |
Affected
| ||||||
| Banu Search vendor "Banu" | Tinyproxy Search vendor "Banu" for product "Tinyproxy" | 1.8.0 Search vendor "Banu" for product "Tinyproxy" and version "1.8.0" | - |
Affected
| ||||||
| Banu Search vendor "Banu" | Tinyproxy Search vendor "Banu" for product "Tinyproxy" | 1.8.1 Search vendor "Banu" for product "Tinyproxy" and version "1.8.1" | - |
Affected
| ||||||
| Debian Search vendor "Debian" | Debian Linux Search vendor "Debian" for product "Debian Linux" | 6.0 Search vendor "Debian" for product "Debian Linux" and version "6.0" | - |
Affected
| ||||||