CVE Catalog
CVE-1999-0710
HighExploitation Probability (EPSS)
Very high risk11.60%
95th percentile - higher than 95% of all known CVEs
Summary
The Squid package in Red Hat Linux 5.2 and 6.0, and other distributions, installs cachemgr.cgi in a public web directory, allowing remote attackers to use it as an intermediary to connect to other systems.
Risk Assessment
Attackers can exploit this vulnerability to perform intermediary attacks, potentially leading to unauthorized access to other systems on the network.
Recommendation
It is recommended to remove or secure the cachemgr.cgi file and restrict access to it only for trusted users.
Original NVD description (English source)
The Squid package in Red Hat Linux 5.2 and 6.0, and other distributions, installs cachemgr.cgi in a public web directory, which allows remote attackers to use it as an intermediary to connect to other systems.