CVE-2005-2729

The HTTP proxy in Astaro Security Linux 6.0 does not properly filter HTTP CONNECT requests to localhost, which allows remote attackers to bypass firewall rules and connect to local services.

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

6.56% chance of exploitation in the next 30 days, 94th percentile

Published

2005-08-29

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/26198

Security advisories

• http://secunia.com/advisories/16578
• http://www.securityfocus.com/bid/14665

References

• CVE Record
• NVD entry