Unrated severityNVD Advisory· Published Jan 28, 2005· Updated Jun 16, 2026
CVE-2005-0316
CVE-2005-0316
Description
WebWasher Classic 2.2.1 and 3.3, when running in server mode, does not properly drop CONNECT requests to the localhost from external systems, which could allow remote attackers to bypass intended access restrictions.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:webwasher:webwasher_classic:2.2.1:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:webwasher:webwasher_classic:2.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:webwasher:webwasher_classic:3.3:*:*:*:*:*:*:*
- (no CPE)range: 2.2.1, 3.3
Patches
Vulnerability mechanics
References
6- secunia.com/advisories/14058nvdPatchVendor Advisory
- www.securityfocus.com/bid/12394nvdPatchVendor Advisory
- www.oliverkarow.de/research/WebWasherCONNECT.txtnvdExploitVendor Advisory
- marc.infonvd
- securitytracker.com/idnvd
- exchange.xforce.ibmcloud.com/vulnerabilities/19144nvd
News mentions
0No linked articles in our index yet.