Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

tinyproxy: access restriction bypass

Package(s):

tinyproxy

CVE #(s):

CVE-2011-1499

Created:

April 21, 2011

Updated:

April 27, 2011

Description:

From the Debian advisory:

Christoph Martin discovered that incorrect ACL processing in TinyProxy, a lightweight, non-caching, optionally anonymizing http proxy could lead to unintended network access rights.

Alerts:

Debian

DSA-2222-1

2011-04-20

(Log in to post comments)