CVE-2005-2729 The HTTP proxy in Astaro Security Linux 6.0 does not properly filter HTTP CONNECT requests to localhost, which allows remote attackers to bypass firewall rules and connect to local services.
HighCVSS 7.5
EPSS 6.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The HTTP proxy in Astaro Security Linux 6.0 does not properly filter HTTP CONNECT requests to localhost, which allows remote attackers to bypass firewall rules and connect to local services.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| astaro security linux | = 6.001 | No fix listed |
References
- 20050825 Astaro Security Linux 6.0 - HTTP CONNECT Access Localhost Weakness mailing-list
- 16578 third-party-advisory vendor-advisory
- 14665 vdb-entry
- astaro-http-proxy-tcp-connect(22021) vdb-entry