Tinyproxy 'conf.c' Integer Overflow Security Bypass Vulnerability

Bugtraq ID:	47715
Class:	Access Validation Error
CVE:	CVE-2011-1843
Remote:	Yes
Local:	No
Published:	May 04 2011 12:00AM
Updated:	May 07 2015 05:15PM
Credit:	PhobosK
Vulnerable:	Banu Systems Private Limited Tinyproxy 1.8.2
Not Vulnerable:	Banu Systems Private Limited Tinyproxy 1.8.3

Tinyproxy 'conf.c' Integer Overflow Security Bypass Vulnerability

Tinyproxy is prone to a security-bypass vulnerability.

Successful exploits will allow attackers to bypass certain security restrictions and gain unauthorized access to the application. This may aid in further attacks.

Tinyproxy 1.8.2 is vulnerable; other versions may also be affected.

Tinyproxy 'conf.c' Integer Overflow Security Bypass Vulnerability

An attacker can exploit this issue via a browser.

Tinyproxy 'conf.c' Integer Overflow Security Bypass Vulnerability

Solution:
Updates are available. Please see the references for more information.

Tinyproxy 'conf.c' Integer Overflow Security Bypass Vulnerability

References:

• Diffstat (more/less context) (ignore whitespace changes) (Tinyproxy)
  
• Tinyproxy Homepage (Banu Systems Private Limited)