Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
acl.c in Tinyproxy before 1.8.3, when an Allow configuration setting specifies a CIDR block, permits TCP connections from all IP addresses, which makes it easier for remote attackers to hide the origin of web traffic by leveraging the open HTTP proxy server.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Banu Tinyproxy acl.c配置错误漏洞
Vulnerability Description
Tinyproxy是一个小型的HTTP代理软件,它的1.3.2和1.3.3版本存在堆溢出漏洞。 当Allow配置指定了CIDR块时,Tinyproxy 1.8.3之前版本中的acl.c允许从所有IP地址建立TCP连接。远程攻击者可以通过打开HTTP代理服务器隐藏web通信的来源。
CVSS Information
N/A
Vulnerability Type
N/A