Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2011:1293
HistorySep 14, 2011 - 12:00 a.m.

(RHSA-2011:1293) Moderate: squid security update

2011-09-1400:00:00
access.redhat.com
13

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.951 High

EPSS

Percentile

99.1%

JSON

Squid is a high-performance proxy caching server for web clients,
supporting FTP, Gopher, and HTTP data objects.

A buffer overflow flaw was found in the way Squid parsed replies from
remote Gopher servers. A remote user allowed to send Gopher requests to a
Squid proxy could possibly use this flaw to cause the squid child process
to crash or execute arbitrary code with the privileges of the squid user,
by making Squid perform a request to an attacker-controlled Gopher server.
(CVE-2011-3205)

Users of squid should upgrade to this updated package, which contains a
backported patch to correct this issue. After installing this update, the
squid service will be restarted automatically.

Related

veracode 1
openvas 11
oraclelinux 1
nessus 14
checkpoint_advisories 2
altlinux 1
suse 4
debian 1
securityvulns 2
prion 1
cve 1
ubuntucve 1
debiancve 1
gentoo 1
veracode
veracode
Denial Of Service (DoS)
2020-04-10 01:05:32
openvas
openvas
Oracle Linux Local Check: ELSA-2011-1293
2015-10-06 00:00:00
RedHat Update for squid RHSA-2011:1293-01
2012-07-09 00:00:00
RedHat Update for squid RHSA-2011:1293-01
2012-07-09 00:00:00
oraclelinux
oraclelinux
squid security update
2011-09-14 00:00:00
nessus
nessus
Squid 3.x < 3.0.STABLE26 / 3.1.15 / 3.2.0.11 Gopher Buffer Overflow
2011-09-16 00:00:00
Scientific Linux Security Update : squid on SL6.x i386/x86_64
2012-08-01 00:00:00
SuSE 11.1 Security Update : squid3 (SAT Patch Number 5095)
2011-12-13 00:00:00
checkpoint_advisories
checkpoint_advisories
Squid Proxy Gopher Response Processing Denial of Service (CVE-2011-3205)
2012-05-14 00:00:00
Squid Proxy Gopher Response Processing Buffer Overflow (CVE-2011-3205)
2011-11-29 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package squid version 3.1.15-alt1
2011-09-07 00:00:00
suse
suse
Security update for squid3 (important)
2011-09-07 17:08:16
VUL-0: CVE-2011-3205: squid: buffer overflow in Gopher reply parser (important)
2011-09-07 17:08:13
Security update for squid3 (important)
2016-08-09 17:12:26
debian
debian
[SECURITY] [DSA 2304-1] squid3 security update
2011-09-11 17:51:59
securityvulns
securityvulns
squid buffer overflow
2011-09-13 00:00:00
[SECURITY] [DSA 2304-1] squid3 security update
2011-09-13 00:00:00
prion
prion
Buffer overflow
2011-09-06 15:55:00
cve
cve
CVE-2011-3205
2011-09-06 15:55:00
ubuntucve
ubuntucve
CVE-2011-3205
2011-09-06 00:00:00
debiancve
debiancve
CVE-2011-3205
2011-09-06 15:55:00
gentoo
gentoo
Squid: Multiple vulnerabilities
2011-10-26 00:00:00

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.951 High

EPSS

Percentile

99.1%

JSON
Related for RHSA-2011:1293
veracode1openvas11oraclelinux1nessus14checkpoint_advisories2altlinux1suse4debian1securityvulns2prion1cve1ubuntucve1debiancve1gentoo1