Vulnerability in Astaro Security Linux
CVE-2005-2729
The HTTP proxy in Astaro Security Linux 6.0 does not properly filter HTTP CONNECT requests to localhost, which allows remote attackers to bypass firewall rules and connect to local services.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 7.5 (High). Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.066 (93.6th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 94th percentile — 93.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.066 · newest: 0.066 · change: 0.000
Affected products
- Astaro Security Linux — versions 6.001
References
- secunia.com/advisories/16578/ (Vendor Advisory, third-party-advisory)
- marc.info/ (mailing-list)
- www.securityfocus.com/bid/14665 (vdb-entry)
- exchange.xforce.ibmcloud.com/vulnerabilities/22021 (vdb-entry)