Vulnerabilities > CVE-2002-0778 - Unspecified vulnerability in Cisco products

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

network

low complexity

cisco

NVD

Published: 2002-08-12

Updated: 2018-10-30

Summary

The default configuration of the proxy for Cisco Cache Engine and Content Engine allows remote attackers to use HTTPS to make TCP connections to allowed IP addresses while hiding the actual source IP.

Vulnerable Configurations

Part	Description	Count
Application	Cisco Cisco Content Distribution Manager 4630 * Cisco Content Distribution Manager 4630 4.0 Cisco Content Distribution Manager 4630 4.1 Cisco Content Distribution Manager 4650 * Cisco Content Distribution Manager 4650 4.0 Cisco Content Distribution Manager 4650 4.1 Cisco Content Engine 507 Cisco Content Engine 507_2.2.0 Cisco Content Engine 507_3.1 Cisco Content Engine 507_4.0 Cisco Content Engine 507_4.1 Cisco Content Engine 560 Cisco Content Engine 560_2.2.0 Cisco Content Engine 560_3.1 Cisco Content Engine 560_4.0 Cisco Content Engine 560_4.1 Cisco Content Engine 590 Cisco Content Engine 590_2.2.0 Cisco Content Engine 590_3.1 Cisco Content Engine 590_4.0 Cisco Content Engine 590_4.1 Cisco Content Engine 7320 Cisco Content Engine 7320_2.2.0 Cisco Content Engine 7320_3.1 Cisco Content Engine 7320_4.0 Cisco Content Engine 7320_4.1 Cisco Enterprise Content Delivery Network Software 4.0 Cisco Enterprise Content Delivery Network Software 4.1	28
Hardware	Cisco Cisco Cache Engine 505 2.4.0 Cisco Cache Engine 505 3.0 Cisco Cache Engine 550 * Cisco Cache Engine 550 2.2.0 Cisco Cache Engine 550 2.4.0 Cisco Cache Engine 550 3.0 Cisco Cache Engine 570 2.2.0 Cisco Cache Engine 570 2.4.0 Cisco Cache Engine 570 3.0 Cisco Cache Engine 570 570 Cisco Content Router 4430 *	11

Summary

Vulnerable Configurations

References