CVE-2003-1286

Published: Dec 31, 2003Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

HTTP Proxy in Sambar Server before 6.0 beta 6, when security.ini lacks a 127.0.0.1 proxydeny entry, allows remote attackers to send proxy HTTP requests to the Sambar Server's administrative interface and external web servers, by making a "Connection: keep-alive" request before the proxy requests.

Affected (20)

Products: Sambar: Sambar Server

Sambar

1 product

Sambar Server

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Sambar Sambar Server	Version 5.0
Sambar Sambar Server	Version 5.0 beta1
Sambar Sambar Server	Version 5.0 beta2
Sambar Sambar Server	Version 5.0 beta3
Sambar Sambar Server	Version 5.0 beta4
Sambar Sambar Server	Version 5.0 beta5
Sambar Sambar Server	Version 5.0 beta6
Sambar Sambar Server	Version 5.1
Sambar Sambar Server	Version 5.1 beta1
Sambar Sambar Server	Version 5.1 beta2
Sambar Sambar Server	Version 5.1 beta3
Sambar Sambar Server	Version 5.1 beta4
Sambar Sambar Server	Version 5.1 beta5
Sambar Sambar Server	Version 5.2
Sambar Sambar Server	Version 5.3
Sambar Sambar Server	Version 6.0 beta1
Sambar Sambar Server	Version 6.0 beta2
Sambar Sambar Server	Version 6.0 beta3
Sambar Sambar Server	Version 6.0 beta4
Sambar Sambar Server	Version 6.0 beta5