Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2005-2796
HistorySep 07, 2005 - 6:03 p.m.

CVE-2005-2796

2005-09-0718:03:00
[email protected]
web.nvd.nist.gov
34
cve-2005-2796
squid
sslconnecttimeout
denial of service
segmentation fault

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.2 Medium

AI Score

Confidence

Low

0.155 Low

EPSS

Percentile

95.9%

JSON

The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (segmentation fault) via certain crafted requests.

Affected configurations

NVD
Node
squidsquidMatch2.0.patch1
OR
squidsquidMatch2.0.patch2
OR
squidsquidMatch2.0.pre1
OR
squidsquidMatch2.0.release
OR
squidsquidMatch2.0_patch2
OR
squidsquidMatch2.1.patch1
OR
squidsquidMatch2.1.patch2
OR
squidsquidMatch2.1.pre1
OR
squidsquidMatch2.1.pre3
OR
squidsquidMatch2.1.pre4
OR
squidsquidMatch2.1.release
OR
squidsquidMatch2.1_patch2
OR
squidsquidMatch2.2.devel3
OR
squidsquidMatch2.2.devel4
OR
squidsquidMatch2.2.pre1
OR
squidsquidMatch2.2.pre2
OR
squidsquidMatch2.2.stable1
OR
squidsquidMatch2.2.stable2
OR
squidsquidMatch2.2.stable3
OR
squidsquidMatch2.2.stable4
OR
squidsquidMatch2.2.stable5
OR
squidsquidMatch2.3.devel2
OR
squidsquidMatch2.3.devel3
OR
squidsquidMatch2.3.stable1
OR
squidsquidMatch2.3.stable2
OR
squidsquidMatch2.3.stable3
OR
squidsquidMatch2.3.stable4
OR
squidsquidMatch2.3.stable5
OR
squidsquidMatch2.3_.stable4
OR
squidsquidMatch2.3_.stable5
OR
squidsquidMatch2.3_stable5
OR
squidsquidMatch2.4
OR
squidsquidMatch2.4.stable1
OR
squidsquidMatch2.4.stable2
OR
squidsquidMatch2.4.stable3
OR
squidsquidMatch2.4.stable4
OR
squidsquidMatch2.4.stable6
OR
squidsquidMatch2.4.stable7
OR
squidsquidMatch2.4_.stable2
OR
squidsquidMatch2.4_.stable6
OR
squidsquidMatch2.4_.stable7
OR
squidsquidMatch2.4_stable7
OR
squidsquidMatch2.5.6
OR
squidsquidMatch2.5.stable1
OR
squidsquidMatch2.5.stable2
OR
squidsquidMatch2.5.stable3
OR
squidsquidMatch2.5.stable4
OR
squidsquidMatch2.5.stable5
OR
squidsquidMatch2.5.stable6
OR
squidsquidMatch2.5.stable7
OR
squidsquidMatch2.5.stable8
OR
squidsquidMatch2.5.stable9
OR
squidsquidMatch2.5.stable10
OR
squidsquidMatch2.5_.stable1
OR
squidsquidMatch2.5_.stable3
OR
squidsquidMatch2.5_.stable4
OR
squidsquidMatch2.5_.stable5
OR
squidsquidMatch2.5_.stable6
OR
squidsquidMatch2.5_stable3
OR
squidsquidMatch2.5_stable4
OR
squidsquidMatch2.5_stable9

Related

freebsd 1
cvelist 1
nvd 1
openvas 9
nessus 8
debiancve 1
ubuntucve 1
gentoo 1
debian 2
osv 2
ubuntu 1
securityvulns 1
suse 1
centos 2
redhat 1
freebsd
freebsd
squid -- Denial Of Service Vulnerability in sslConnectTimeout
2005-07-21 00:00:00
cvelist
cvelist
CVE-2005-2796
2005-09-07 04:00:00
nvd
nvd
CVE-2005-2796
2005-09-07 18:03:00
openvas
openvas
FreeBSD Ports: squid
2008-09-04 00:00:00
FreeBSD Ports: squid
2008-09-04 00:00:00
Debian Security Advisory DSA 809-1 (squid)
2008-01-17 00:00:00
nessus
nessus
FreeBSD : squid -- Denial Of Service Vulnerability in sslConnectTimeout (4e210d72-1c5c-11da-92ce-0048543d60ce)
2006-05-13 00:00:00
Ubuntu 4.10 / 5.04 : squid vulnerabilities (USN-183-1)
2006-01-15 00:00:00
GLSA-200509-06 : Squid: Denial of Service vulnerabilities
2005-09-12 00:00:00
debiancve
debiancve
CVE-2005-2796
2005-09-07 18:03:00
ubuntucve
ubuntucve
CVE-2005-2796
2005-09-07 00:00:00
gentoo
gentoo
Squid: Denial of Service vulnerabilities
2005-09-07 00:00:00
debian
debian
[SECURITY] [DSA 809-1] New squid packages fix several vulnerabilities
2005-09-13 05:19:17
[SECURITY] [DSA 809-1] New squid packages fix several vulnerabilities
2005-09-13 05:19:17
osv
osv
squid - assertion error
2005-09-13 00:00:00
squid - several
2005-09-13 00:00:00
ubuntu
ubuntu
Squid vulnerabilities
2005-09-13 00:00:00
securityvulns
securityvulns
[OpenPKG-SA-2005.021] OpenPKG Security Advisory (squid)
2005-09-13 00:00:00
suse
suse
remote denial of service in squid
2005-09-16 12:58:14
centos
centos
squid security update
2005-09-15 09:25:45
squid security update
2005-09-15 23:41:30
redhat
redhat
(RHSA-2005:766) squid security update
2005-09-15 00:00:00

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.2 Medium

AI Score

Confidence

Low

0.155 Low

EPSS

Percentile

95.9%

JSON
Related for CVE-2005-2796
freebsd1cvelist1nvd1openvas9nessus8debiancve1ubuntucve1gentoo1debian2osv2ubuntu1securityvulns1suse1centos2redhat1