CVE-2001-0483

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Configuration error in Axent Raptor Firewall 6.5 allows remote attackers to use the firewall as a proxy to access internal web resources when the http.noproxy Rule is not set.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2001-03/0359.htmlPatch, Vendor Advisory
http://www.securityfocus.com/archive/1/171953Patch, Vendor Advisory
http://www.securityfocus.com/bid/2517Exploit, Patch, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2001-03/0359.htmlPatch, Vendor Advisory
http://www.securityfocus.com/archive/1/171953Patch, Vendor Advisory
http://www.securityfocus.com/bid/2517Exploit, Patch, Vendor Advisory

Timeline

Published: Jun 18, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-04846.4Tektronix PhaserLink 850 does not require authentication for access to configuration pages such as _ncl_subjects.shtml and _ncl_items.shtml,CVE-2001-04857.2Unknown vulnerability in netprint in IRIX 6.2, and possibly other versions, allows local users with lp privileges attacker to execute arbitr CVE-2001-04865.0Remote attackers can cause a denial of service in Novell BorderManager 3.6 and earlier by sending TCP SYN flood to port 353.CVE-2001-04875.0AIX SNMP server snmpd allows remote attackers to cause a denial of service via a RST during the TCP connection.CVE-2001-04882.1pcltotiff in HP-UX 10.x has unnecessary set group id permissions, which allows local users to cause a denial of service.CVE-2001-04897.5Format string vulnerability in gftp prior to 2.0.8 allows remote malicious FTP servers to execute arbitrary commands.CVE-2001-04907.5Buffer overflow in WINAMP 2.6x and 2.7x allows attackers to execute arbitrary code via a long string in an AIP file.CVE-2001-04915.0Directory traversal vulnerability in RaidenFTPD Server 2.1 before build 952 allows attackers to access files outside the ftp root via dot do CVE-2001-04925.0Netcruiser Web server version 0.1.2.8 and earlier allows remote attackers to determine the physical path of the server via a URL containing CVE-2001-04935.0Small HTTP server 2.03 allows remote attackers to cause a denial of service via a URL that contains an MS-DOS device name such as aux.CVE-2001-04947.5Buffer overflow in IPSwitch IMail SMTP server 6.06 and possibly prior versions allows remote attackers to execute arbitrary code via a long CVE-2001-04955.0Directory traversal in DataWizard WebXQ server 1.204 allows remote attackers to view files outside of the web root via a .. (dot dot) attack