CVE-1999-0710 Server-side request forgery in n/a
Remote attackers can use the publicly accessible cachemgr.cgi script to connect to other systems, bypassing network restrictions.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-1999-0710?
CVE-1999-0710 is a high-severity server-side request forgery vulnerability in Redhat Linux, published on 4 Jan 2000. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The Squid package in Red Hat Linux 5.2 and 6.0, and other distributions, installs cachemgr.cgi in a public web directory, which allows remote attackers to use it as an intermediary to connect to other systems.
Which versions are affected by CVE-1999-0710?
It affects 1 product.
Products include Redhat Linux.
How do I fix CVE-1999-0710?
Change a configuration setting.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is CVE-1999-0710 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-1999-0710 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in Redhat Linux
Sources
Also known as DEBIAN-CVE-1999-0710, GHSA-qhrx-x4p7-jr4j.