CyberSec.Space Logo
CVEブラウザに戻る

CVE-2011-1843

MEDIUM
6.8
CVSS Severity Score
EPSS Score0.1340%
EPSS Percentile40.07th
Published2011年5月3日
Last Modified2026年4月29日

Vulnerability Description

Integer overflow in conf.c in Tinyproxy before 1.8.3 might allow remote attackers to bypass intended access restrictions in opportunistic circumstances via a TCP connection, related to improper handling of invalid port numbers.

Affected Platforms (CPE)

📦
Banu

Tinyproxy

<= 1.8.2
📦
Banu

Tinyproxy

= 1.5.0
📦
Banu

Tinyproxy

= 1.5.0
📦
Banu

Tinyproxy

= 1.5.0
📦
Banu

Tinyproxy

= 1.5.0
📦
Banu

Tinyproxy

= 1.5.0
📦
Banu

Tinyproxy

= 1.5.0
📦
Banu

Tinyproxy

= 1.5.0
📦
Banu

Tinyproxy

= 1.5.0
📦
Banu

Tinyproxy

= 1.5.0
📦
Banu

Tinyproxy

= 1.5.0
📦
Banu

Tinyproxy

= 1.5.0
📦
Banu

Tinyproxy

= 1.5.0
📦
Banu

Tinyproxy

= 1.5.0
📦
Banu

Tinyproxy

= 1.5.0
📦
Banu

Tinyproxy

= 1.5.0
📦
Banu

Tinyproxy

= 1.5.0
📦
Banu

Tinyproxy

= 1.5.1
📦
Banu

Tinyproxy

= 1.5.1
📦
Banu

Tinyproxy

= 1.5.1
📦
Banu

Tinyproxy

= 1.5.1
📦
Banu

Tinyproxy

= 1.5.1
📦
Banu

Tinyproxy

= 1.5.1
📦
Banu

Tinyproxy

= 1.5.1
📦
Banu

Tinyproxy

= 1.5.1
📦
Banu

Tinyproxy

= 1.5.1
📦
Banu

Tinyproxy

= 1.5.1
📦
Banu

Tinyproxy

= 1.5.1
📦
Banu

Tinyproxy

= 1.5.2
📦
Banu

Tinyproxy

= 1.5.2
📦
Banu

Tinyproxy

= 1.5.2
📦
Banu

Tinyproxy

= 1.5.3
📦
Banu

Tinyproxy

= 1.5.3
📦
Banu

Tinyproxy

= 1.6.0
📦
Banu

Tinyproxy

= 1.6.0
📦
Banu

Tinyproxy

= 1.6.0
📦
Banu

Tinyproxy

= 1.6.0
📦
Banu

Tinyproxy

= 1.6.0
📦
Banu

Tinyproxy

= 1.6.0
📦
Banu

Tinyproxy

= 1.6.0
📦
Banu

Tinyproxy

= 1.6.0
📦
Banu

Tinyproxy

= 1.6.0
📦
Banu

Tinyproxy

= 1.6.1
📦
Banu

Tinyproxy

= 1.6.2
📦
Banu

Tinyproxy

= 1.6.3
📦
Banu

Tinyproxy

= 1.6.4
📦
Banu

Tinyproxy

= 1.6.5
📦
Banu

Tinyproxy

= 1.7.0
📦
Banu

Tinyproxy

= 1.7.1
📦
Banu

Tinyproxy

= 1.8.0
📦
Banu

Tinyproxy

= 1.8.1

References & Advisories

🔗 http://www.securityfocus.com/bid/47715
🔗 https://banu.com/bugzilla/show_bug.cgi?id=90
🔗 https://banu.com/cgit/tinyproxy/diff/?id=97b9984484299b2ce72f8f4fc3706dab8a3a8439
🔗 http://www.securityfocus.com/bid/47715
🔗 https://banu.com/bugzilla/show_bug.cgi?id=90
🔗 https://banu.com/cgit/tinyproxy/diff/?id=97b9984484299b2ce72f8f4fc3706dab8a3a8439

関連する脆弱性情報

CVE-2001-012910.0

Buffer overflow in Tinyproxy HTTP proxy 1.3.3 and earlier allows remote attackers to cause a denial of service and possibly execut...

CVE-2002-08477.5

tinyproxy HTTP proxy 1.5.0, 1.4.3, and earlier allows remote attackers to execute arbitrary code via memory that is freed twice (d...

CVE-2017-117475.5

main.c in Tinyproxy 1.8.4 and earlier creates a /run/tinyproxy/tinyproxy.pid file after dropping privileges to a non-root account,...

CVE-2012-35055.0

Tinyproxy 1.8.3 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via (1) a large numb...