Squid Authentication Headers Handling Denial of Service (CVE-2005-2917)

The Squid proxy server is an open source, Internet proxy and caching application. It supports the proxying of FTP, HTTP, SSL, and DNS services. The default proxy service port is 3128/TCP. A vulnerability exists in the Squid proxy server in the processing of authentication requests. The flaw is...

SLES9: Security update for squid

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: squid For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5017904 within the SuSE...

CentOS 4 : squid (CESA-2006:0052)

An updated squid package that fixes a security vulnerability as well as several issues is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, a...

CentOS 3 : squid (CESA-2006:0045)

Updated squid packages that fix a security vulnerability as well as several bugs are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HT...

RHEL 3 : squid (RHSA-2006:0045)

Updated squid packages that fix a security vulnerability as well as several bugs are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HT...

squid security update

CentOS Errata and Security Advisory CESA-2006:0045 Updated squid packages that fix a security vulnerability as well as several bugs are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Squid is a high-performance proxy caching...

Moderate: Red Hat Security Advisory: squid security update

Updated squid packages that fix a security vulnerability as well as several bugs are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HT...

squid security update

CentOS Errata and Security Advisory CESA-2006:0052 An updated squid package that fixes a security vulnerability as well as several issues is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Squid is a high-performance proxy cachin...

Moderate: Red Hat Security Advisory: squid security update

An updated squid package that fixes a security vulnerability as well as several issues is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, a...

Debian DSA-828-1 : squid - authentication handling

Upstream developers of squid, the popular WWW proxy cache, have discovered that changes in the authentication scheme are not handled properly when given certain request sequences while NTLM authentication is in place, which may cause the daemon to restart. %NASLMINLEVEL 70300 C Tenable Network...

CVE-2005-2917

Squid 2.5.STABLE10 and earlier, while performing NTLM authentication, does not properly handle certain request sequences, which allows attackers to cause a denial of service daemon restart...

CVE-2005-2917

The CVE-2005-2917 issue affects the Squid proxy server (2.5.STABLE10 and earlier) during NTLM authentication, where certain crafted request sequences can crash the daemon. Impact described in multiple advisories: a remote attacker could terminate the Squid process, causing a denial of service wit...