Unscored severity · published Apr 28, 2012
CVE-2012-2213
Squid 3.1.9 allows remote attackers to bypass the access configuration for the CONNECT method by providing an arbitrary allowed hostname in the Host HTTP header
–
CVSS
12.2%
EPSS
No
On KEV
Description
Squid 3.1.9 allows remote attackers to bypass the access configuration for the CONNECT method by providing an arbitrary allowed hostname in the Host HTTP header. NOTE: this issue might not be reproducible, because the researcher is unable to provide a squid.conf file for a vulnerable system, and the observed behavior is consistent with a squid.conf file that was (perhaps inadvertently) designed to allow access based on a "req_header Host" acl regex that matches www.uol.com.br
Exploitation
Is it being used?
Exploit prediction (EPSS)12.2% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SQ
Squid · Squid-cache
3.1.9 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-2213
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-2213
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2012-04/0117.html
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2012-04/0131.html
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2012-04/0140.html
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2012-04/0146.html
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2012-04/0163.html
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2012-04/0165.html
More from Squid
9.8
CVE-2025-54574
Squid is a caching proxy for the Web
9.8
CVE-2020-11945
An issue was discovered in Squid before 5.0.2
9.8
CVE-2019-12519
An issue was discovered in Squid through 4.7
9.8
CVE-2019-12524
An issue was discovered in Squid through 4.7
9.8
CVE-2019-12526
An issue was discovered in Squid before 4.9