Test ID:	1.3.6.1.4.1.25623.1.0.69565
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-2222-1)
Summary:	The remote host is missing an update for the Debian 'tinyproxy' package(s) announced via the DSA-2222-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'tinyproxy' package(s) announced via the DSA-2222-1 advisory. Vulnerability Insight: Christoph Martin discovered that incorrect ACL processing in TinyProxy, a lightweight, non-caching, optionally anonymizing HTTP proxy, could lead to unintended network access rights. The oldstable distribution (lenny) is not affected. For the stable distribution (squeeze), this problem has been fixed in version 1.8.2-1squeeze1. For the unstable distribution (sid), this problem has been fixed in version 1.8.2-2. We recommend that you upgrade your tinyproxy packages. Affected Software/OS: 'tinyproxy' package(s) on Debian 6. Solution: Please install the updated package(s). CVSS Score: 2.6 CVSS Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-1499 44274 http://secunia.com/advisories/44274 DSA-2222 http://www.debian.org/security/2011/dsa-2222 [oss-security] 20110407 CVE request: tinyproxy runs as an open proxy when attempting to restrict allowable IP ranges http://openwall.com/lists/oss-security/2011/04/07/9 [oss-security] 20110408 Re: CVE request: tinyproxy runs as an open proxy when attempting to restrict allowable IP ranges http://openwall.com/lists/oss-security/2011/04/08/3 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=621493 https://banu.com/bugzilla/show_bug.cgi?id=90 https://banu.com/cgit/tinyproxy/diff/?id=e8426f6662dc467bd1d827100481b95d9a4a23e4 https://bugzilla.redhat.com/show_bug.cgi?id=694658 tinyproxy-aclc-sec-bypass(67256) https://exchange.xforce.ibmcloud.com/vulnerabilities/67256
Copyright	Copyright (C) 2011 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.