CVE:CVE-2002-0778
CNNVD:CNNVD-200208-017
Cisco Cache Engine系列产品是CISCO公司开发和维护的网络集成的高速缓存解决方案，可以减少广域网带宽使用，最大限度地提高网络服务质量，提高现有网络的可伸缩性。
Cisco Cache Engine默认配置存在漏洞，可导致远程攻击者滥用代理，连接任意远程IP地址。
Cisco Cache Engine除了对远程WEB服务器提供页面缓冲外，软件也提供使用各种协议如FTP和HTTPS来缓冲数据到其他代理服务器，此功能在产品默认配置中是使能的，由于代理HTTPS服务可以在系统不同端口使用，使的攻击者利用客户端指示设备重定向代理请求打开TCP连接到任意可达IP地址和端口，导致滥用资源和隐藏连接源地址等操作。
solution:Upgrade cisco content_distribution_manager_4630 to a higher version than *,4.0,4.1,and avoid the version 4.0,4.1; Upgrade cisco content_distribution_manager_4650 to a higher version than *,4.0,4.1,and avoid the version 4.0,4.1; Upgrade cisco content_engine to a higher version than 507,507_2.2.0,507_3.1,507_4.0,507_4.1,560,560_2.2.0,560_3.1,560_4.0,560_4.1,590,590_2.2.0,590_3.1,590_4.0,590_4.1,7320,7320_2.2.0,7320_3.1,7320_4.0,7320_4.1,and avoid the version 507,507_2.2.0,507_3.1,507_4.0,507_4.1,560,560_2.2.0,560_3.1,560_4.0,560_4.1,590,590_2.2.0,590_3.1,590_4.0,590_4.1,7320,7320_2.2.0,7320_3.1,7320_4.0,7320_4.1; Upgrade cisco enterprise_content_delivery_network_software to a higher version than 4.0,4.1,and avoid the version 4.0,4.1; Upgrade cisco cache_engine_505 to a higher version than 2.4.0,3.0,and avoid the version 2.4.0,3.0; Upgrade cisco cache_engine_550 to a higher version than *,2.2.0,2.4.0,3.0,and avoid the version 2.2.0,2.4.0,3.0; Upgrade cisco cache_engine_570 to a higher version than 2.2.0,2.4.0,3.0,570,and avoid the version 2.2.0,2.4.0,3.0,570; Upgrade cisco content_router_4430 to a higher version than *