NVD

Id
44047  
Name
CVE-2012-2213  
Description
** DISPUTED ** Squid 3.1.9 allows remote attackers to bypass the access configuration for the CONNECT method by providing an arbitrary allowed hostname in the Host HTTP header. NOTE: this issue might not be reproducible, because the researcher is unable to provide a squid.conf file for a vulnerable system, and the observed behavior is consistent with a squid.conf file that was (perhaps inadvertently) designed to allow access based on a "req_header Host" acl regex that matches www.uol.com.br.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2012-04-28  
Modified Date
2012-04-30  
Seq
2012-2213  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
221368 44047 CVE-2012-2213 20120416 Squid URL Filtering Bypass  View
221369 44047 CVE-2012-2213 20120418 Re: Squid URL Filtering Bypass  View
221370 44047 CVE-2012-2213 20120419 Re: Squid URL Filtering Bypass  View
221371 44047 CVE-2012-2213 20120419 RE: Squid URL Filtering Bypass  View
221372 44047 CVE-2012-2213 20120420 Re: Squid URL Filtering Bypass  View
221373 44047 CVE-2012-2213 20120421 Re: Squid URL Filtering Bypass  View

Related JVN