CVE-2003-1286

EPSS 3.4%

HTTP Proxy in Sambar Server before 6.0 beta 6, when security.ini lacks a 127.0.0.1 proxydeny entry, allows remote attackers to send proxy HTTP requests to the Sambar Server's administrative interface and external web servers, by making a "Connection: keep-alive" request before the proxy requests.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/24076unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://archives.neohapsis.com/archives/bugtraq/2004-04/0353.html http://secunia.com/advisories/9578 http://securitytracker.com/id?1007819 https://exchange.xforce.ibmcloud.com/vulnerabilities/16054 http://www.idefense.com/application/poi/display?id=103&type=vulnerabilities&flashstatus=true http://www.sambar.com/security.htm http://www.securityfocus.com/bid/10256