Mandriva Linux Security Advisory : squid (MDVSA-2015:103)

Updated squid packages fix security vulnerabilities : Due to incorrect state management, Squid before 3.3.12 is vulnerable to a denial of service attack when processing certain HTTPS requests if the SSL-Bump feature is enabled CVE-2014-0128. Matthew Daley discovered that Squid 3 did not properly...

CVE-2015-0128

Technical details about CVE-2015-0128 are not publicly available in the provided connected documents. The materials reiterate the XSS description and affected IBM Rational Quality Manager versions; monitor for updates.

CVE-2015-0128

Cross-site scripting XSS vulnerability in IBM Rational Quality Manager 2.x and 3.x before 3.0.1.6 iFix4, 4.x before 4.0.7 iFix3, and 5.x before 5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2015-0124...

Adobe Shockwave Player <= 11.5.6.606 Multiple Vulnerabilities (APSB10-12) (Mac OS X)

The remote Mac OS X host contains a version of Adobe Shockwave Player that is 11.5.6.606 or earlier. It is, therefore, affected by multiple vulnerabilities : - Processing specially crafted FFFFFF45h Shockwave 3D blocks results in memory corruption. CVE-2010-0127, CVE-2010-1283 - A signedness erro...

Medium: squid

Issue Overview: A denial of service flaw was found in the way Squid processed certain HTTPS requests when the SSL Bump feature was enabled. A remote attacker could send specially crafted requests that could cause Squid to crash. CVE-2014-0128 Affected Packages: squid Issue Correction: Run yum...

Mandriva Linux Security Advisory : squid (MDVSA-2014:114)

Updated squid packages fix security vulnerability : Due to incorrect state management, Squid before 3.3.12 is vulnerable to a denial of service attack when processing certain HTTPS requests if the SSL-Bump feature is enabled CVE-2014-0128. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

CentOS 6 : squid (CESA-2014:0597)

Updated squid packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

squid security update

CentOS Errata and Security Advisory CESA-2014:0597 Updated squid packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base scor...

Scientific Linux Security Update : squid on SL6.x i386/x86_64 (20140603)

A denial of service flaw was found in the way Squid processed certain HTTPS requests when the SSL Bump feature was enabled. A remote attacker could send specially crafted requests that could cause Squid to crash. CVE-2014-0128 After installing this update, the squid service will be restarted...

RHEL 6 : squid (RHSA-2014:0597)

Updated squid packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

SuSE 11.3 Security Update : squid3 (SAT Patch Number 9138)

A remote DoS attack in the Squid web proxy has been fixed. Due to incorrect state management, Squid was vulnerable to a denial of service attack when processing certain HTTPS requests. CVE-2014-0128 For more information see http://www.squid-cache.org/Advisories/SQUID-20141.txt . Additionally, a b...

MGASA-2014-0192 Updated squid package fixes CVE-2014-0128

Updated squid packages fix security vulnerability: Due to incorrect state management, Squid before 3.3.12 is vulnerable to a denial of service attack when processing certain HTTPS requests if the SSL-Bump feature is enabled CVE-2014-0128...

Fedora Update for squid FEDORA-2014-4800

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 19 : squid-3.3.12-1.fc19 (2014-4800)

Use the version from Fedora 20. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

CVE-2014-0128

CVE-2014-0128 affects Squid up to versions 3.3.12 (and 3.4.4) when SSL-Bump is enabled. An attacker can cause a denial of service (assertion failure) via a crafted range request, due to state-management issues. Safe remediation per connected advisories is to upgrade Squid to a fixed release (e.g....

Updated squid packages fix CVE-2014-0128

Updated squid packages fix security vulnerability: Due to incorrect state management, Squid before 3.3.12 is vulnerable to a denial of service attack when processing certain HTTPS requests if the SSL-Bump feature is enabled CVE-2014-0128...

Fedora 20 : squid-3.3.12-1.fc20 (2014-3915)

New upstream version with a security fix. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVE...

Squid SSL-Bump HTTPS请求处理拒绝服务漏洞

CVE ID:CVE-2014-0128 Squid Cache简称为Squid是一个流行的代理服务器和Web缓存服务器软件。 Squid SSL-Bump中相关状态管理处理存在错误，允许攻击者提交特制的HTTP请求触发断言错误，造成拒绝服务攻击。 0 Squid 3.x 厂商补丁： Squid ----- Squid 3.3.12或3.4.4已经修复该漏洞，建议用户下载更新： http://www.squid-cache.org...

HP Onboard Administrator < 3.50 Multiple Security Vulnerabilities

HP Onboard Administrator is prone to multiple security vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

HP Onboard Administrator Multiple Vulnerabilities

The remote web server is a version of HP Onboard Administrator OA that is affected by the following vulnerabilities : - HP Onboard Administrator before 3.50 allows remote attackers to obtain sensitive information via unspecified vectors. CVE-2012-0130 - HP Onboard Administrator before 3.50 allows...