CVE-2005-0316

Published: Jan 28, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

WebWasher Classic 2.2.1 and 3.3, when running in server mode, does not properly drop CONNECT requests to the localhost from external systems, which could allow remote attackers to bypass intended access restrictions.

Affected (2)

Products: Webwasher: Webwasher Classic

Webwasher

1 product

Webwasher Classic

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Webwasher Webwasher Classic	Version 2.2.1
Webwasher Webwasher Classic	Version 3.3

References (12)

http://marc.info/?l=bugtraq&m=110693045507245&w=2

Source: cve@mitre.org

http://secunia.com/advisories/14058

Source: cve@mitre.org

PatchVendor Advisory

http://securitytracker.com/id?1013036

Source: cve@mitre.org

http://www.oliverkarow.de/research/WebWasherCONNECT.txt

Source: cve@mitre.org

ExploitVendor Advisory

http://www.securityfocus.com/bid/12394

Source: cve@mitre.org

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/19144

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=110693045507245&w=2