Vulnerability in Cisco Cache_engine_505
CVE-2002-0778
The default configuration of the proxy for Cisco Cache Engine and Content Engine allows remote attackers to use HTTPS to make TCP connections to allowed IP addresses while hiding the actual source IP.
EPSS: 0.016 (73.5th percentile) — read the EPSS interpretation.
Affected products
- Cisco Cache_engine_505 — versions 2.4.0, 3.0
- Cisco Cache_engine_550 — versions 2.2.0, 2.4.0, 3.0
- Cisco Cache_engine_570 — versions 2.2.0, 2.4.0, 3.0
- Cisco Content_distribution_manager_4630 — versions 4.0, 4.1
- Cisco Content_distribution_manager_4650 — versions 4.0, 4.1
- Cisco Content_engine — versions 507, 507_2.2.0, 507_3.1
- Cisco Content_router_4430
- Cisco Enterprise_content_delivery_network_software — versions 4.0, 4.1
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- cve@mitre.org (vdb-entry, Vendor Advisory, x_refsource_XF)
- cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)