Red Hat Bugzilla – Bug 156162
CVE-1999-0710 cachemgr.cgi access control bypass
Last modified: 2014-08-31 19:27:32 EDT
+++ This bug was initially created as a clone of Bug #156161 +++
The RedHat squid program installs cachemgr.cgi in a public web directory,
allowing remote attackers to use it as an intermediary to connect to other systems.
This patch adds access controls to the cachemgr.cgi script, preventing it from
being abused to reach other servers than allowed in a local configuration file.