CVE

Id
55456  
CVE No.
CVE-2012-2213  
Status
Candidate  
Description
** DISPUTED ** Squid 3.1.9 allows remote attackers to bypass the access configuration for the CONNECT method by providing an arbitrary allowed hostname in the Host HTTP header. NOTE: this issue might not be reproducible, because the researcher is unable to provide a squid.conf file for a vulnerable system, and the observed behavior is consistent with a squid.conf file that was (perhaps inadvertently) designed to allow access based on a "req_header Host" acl regex that matches www.uol.com.br.  
Phase
Assigned (20120406)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
579212 55456 CVE-2012-2213 BUGTRAQ:20120416 Squid URL Filtering Bypass  View
579213 55456 CVE-2012-2213 URL:http://archives.neohapsis.com/archives/bugtraq/2012-04/0117.html  View
579214 55456 CVE-2012-2213 BUGTRAQ:20120418 Re: Squid URL Filtering Bypass  View
579215 55456 CVE-2012-2213 URL:http://archives.neohapsis.com/archives/bugtraq/2012-04/0131.html  View
579216 55456 CVE-2012-2213 BUGTRAQ:20120419 RE: Squid URL Filtering Bypass  View
579217 55456 CVE-2012-2213 URL:http://archives.neohapsis.com/archives/bugtraq/2012-04/0146.html  View
579218 55456 CVE-2012-2213 BUGTRAQ:20120419 Re: Squid URL Filtering Bypass  View
579219 55456 CVE-2012-2213 URL:http://archives.neohapsis.com/archives/bugtraq/2012-04/0140.html  View
579220 55456 CVE-2012-2213 BUGTRAQ:20120420 Re: Squid URL Filtering Bypass  View
579221 55456 CVE-2012-2213 URL:http://archives.neohapsis.com/archives/bugtraq/2012-04/0163.html  View
579222 55456 CVE-2012-2213 BUGTRAQ:20120421 Re: Squid URL Filtering Bypass  View

Related JVN