Unscored severity · published Feb 20, 1998
CVE-1999-1273
Squid Internet Object Cache 1.1.20 allows users to bypass access control lists (ACLs) by encoding the URL with hexadecimal escape sequences
–
CVSS
1.3%
EPSS
No
On KEV
Description
Squid Internet Object Cache 1.1.20 allows users to bypass access control lists (ACLs) by encoding the URL with hexadecimal escape sequences.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SW
Squid Web Proxy · National Science Foundation
1.1.20 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-1999-1273
CVE.org
https://www.cve.org/CVERecord?id=CVE-1999-1273
Exploit
http://www.securityfocus.com/archive/1/8551
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/1627
More from Squid Web Proxy
–
CVE-2001-0142
squid 2.3 and earlier allows local users to overwrite arbitrary files via a symlink attack in some configurations
–
CVE-1999-1481
Squid 2.2.STABLE5 and below, when using external authentication, allows attackers to bypass access controls via a newline in the user/password pair