Astaro Security Linux 6.0 01 - HTTP CONNECT Unauthorized Access

Author: Oliver Karow
type: remote
platform: linux
port: 
date_added: 2005-08-25 
date_updated: 2013-06-14 
verified: 1 
codes: CVE-2005-2729;OSVDB-19056 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/14665/info

Astaro Security Linux is prone to a weakness that may allow remote attackers to connect to arbitrary ports on a vulnerable computer.

This weakness may be combined with other attacks to exploit latent vulnerabilities. An attacker can bypass access controls implemented by the application through this attack.

Astaro Security Linux 6.001 is prone to this weakness.

Connect to TCP port 8080 and enter the following command:

CONNECT localhost:80 HTTP/1.0