CVE-2002-0778 The default configuration of the proxy for Cisco Cache Engine and Content Engine allows remote attackers to use HTTPS to make TCP connections to allowed IP addresses while hiding the actual source IP.
HighCVSS 7.5
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The default configuration of the proxy for Cisco Cache Engine and Content Engine allows remote attackers to use HTTPS to make TCP connections to allowed IP addresses while hiding the actual source IP.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco content distribution manager 4630 | All versions | No fix listed |
| cisco content distribution manager 4630 | = 4.0 | No fix listed |
| cisco content distribution manager 4630 | = 4.1 | No fix listed |
| cisco content distribution manager 4650 | All versions | No fix listed |
| cisco content distribution manager 4650 | = 4.0 | No fix listed |
| cisco content distribution manager 4650 | = 4.1 | No fix listed |
| cisco content engine | = 507 | No fix listed |
| cisco content engine | = 507_2.2.0 | No fix listed |
| cisco content engine | = 507_3.1 | No fix listed |
| cisco content engine | = 507_4.0 | No fix listed |
| cisco content engine | = 507_4.1 | No fix listed |
| cisco content engine | = 560 | No fix listed |
| cisco content engine | = 560_2.2.0 | No fix listed |
| cisco content engine | = 560_3.1 | No fix listed |
| cisco content engine | = 560_4.0 | No fix listed |
| cisco content engine | = 560_4.1 | No fix listed |
| cisco content engine | = 590 | No fix listed |
| cisco content engine | = 590_2.2.0 | No fix listed |
| cisco content engine | = 590_3.1 | No fix listed |
| cisco content engine | = 590_4.0 | No fix listed |
| cisco content engine | = 590_4.1 | No fix listed |
| cisco content engine | = 7320 | No fix listed |
| cisco content engine | = 7320_2.2.0 | No fix listed |
| cisco content engine | = 7320_3.1 | No fix listed |
| cisco content engine | = 7320_4.0 | No fix listed |
Show 14 more
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco content engine | = 7320_4.1 | No fix listed |
| cisco enterprise content delivery network software | = 4.0 | No fix listed |
| cisco enterprise content delivery network software | = 4.1 | No fix listed |
| cisco cache engine 505 | = 2.4.0 | No fix listed |
| cisco cache engine 505 | = 3.0 | No fix listed |
| cisco cache engine 550 | All versions | No fix listed |
| cisco cache engine 550 | = 2.2.0 | No fix listed |
| cisco cache engine 550 | = 2.4.0 | No fix listed |
| cisco cache engine 550 | = 3.0 | No fix listed |
| cisco cache engine 570 | = 2.2.0 | No fix listed |
| cisco cache engine 570 | = 2.4.0 | No fix listed |
| cisco cache engine 570 | = 3.0 | No fix listed |
| cisco cache engine 570 | = 570 | No fix listed |
| cisco content router 4430 | All versions | No fix listed |
References
- 20020528 Transparent Cache Engine and Content Engine TCP Relay Vulnerability vendor-advisory
- cisco-cache-content-tcp-forward(9082) vdb-entry vendor-advisory
- 4751 patch vdb-entry vendor-advisory