CVE-2005-0316 | BDVDB-2026-8038 Detail

Description#

WebWasher Classic 2.2.1 and 3.3, when running in server mode, does not properly drop CONNECT requests to the localhost from external systems, which could allow remote attackers to bypass intended access restrictions.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/14058
http://www.securityfocus.com/bid/12394
http://marc.info/?l=bugtraq&m=110693045507245&w=2
https://exchange.xforce.ibmcloud.com/vulnerabilities/19144
http://www.oliverkarow.de/research/WebWasherCONNECT.txt
http://securitytracker.com/id?1013036

Exploit#

No public exploit known

History#

Version 12005-02-10Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.