Security Advisory

CVE-2011-1499

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2011-04-29 22:00:00

Last updated 2024-08-06 22:28:41

Assigner redhat

CVSS score not scored

State PUBLISHED

Description

acl.c in Tinyproxy before 1.8.3, when an Allow configuration setting specifies a CIDR block, permits TCP connections from all IP addresses, which makes it easier for remote attackers to hide the origin of web traffic by leveraging the open HTTP proxy server.

← Browse all CVEs View on cve.org ↗