Traffic proxy in macOS Server and macOS - CVE-2016-4694

Vulnerability identifier: #VU593

CSH Severity: Low

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2016-4694

CWE-ID: CWE-300

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote user to proxy traffic to an arbitrary server.
The weakness exists due to usage of variable HTTP_PROXY by macOS Server CGI applications. Under the influence of specially crafted and sent HTTP "Proxy:" the target CGI application may proxy HTTP connections to an arbitrary port on an arbitrary server.
Successful exploitation of the vulnerability leads to proxying traffic to an arbitrary server.

macOS Server
macOS

Update to 5.2.

• https://support.apple.com/en-us/HT207171
• https://support.apple.com/kb/HT207170

• Traffic proxy in Apple MAC OS X