Squid Proxy Gopher Response Processing Denial of Service (CVE-2011-3205)

A denial of service vulnerability has been reported in Squid proxy server...

SuSE 11.1 Security Update : squid3 (SAT Patch Number 5095)

This update of squid3 fixes a buffer overflow vulnerability in the Gopher reply parser code. CVE-2011-3205 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C...

Squid Proxy Gopher Response Processing Buffer Overflow (CVE-2011-3205)

A denial of service vulnerability has been reported in Squid proxy server. The vulnerability is due to a boundary error while parsing malformed Gopher responses. A remote attacker could exploit this vulnerability by setting up a Gopher server to send malicious responses. Successful exploitation...

Mandriva Update for squid MDVSA-2011:150 (squid)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Debian Security Advisory DSA 2304-1 (squid3)

The remote host is missing an update to squid3 announced via advisory DSA 2304-1. OpenVAS Vulnerability Test $Id: deb23041.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2304-1 squid3 Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

squid security update

7:3.1.10-1.el61.1 - Resolves: 735447 - CVE-2011-3205 squid: buffer overflow flaw in Squid's Gopher reply parser...

[SECURITY] [DSA 2304-1] squid3 security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA-2304-1 [email protected] http://www.debian.org/security/ Nico Golde Sep 11, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2304-1] squid3 security update

-------------------------------------------------------------------------- Debian Security Advisory DSA-2304-1 [email protected] http://www.debian.org/security/ Nico Golde Sep 11, 2011 http://www.debian.org/security/faq -...

VUL-0: CVE-2011-3205: squid: buffer overflow in Gopher reply parser (important)

This update of squid3 fixes a buffer overflow vulnerability in the Gopher reply parser code CVE-2011-3205...

Security fix for the ALT Linux 8 package squid version 3.1.15-alt1

Sept. 7, 2011 Vitaly Kuznetsov 3.1.15-alt1 - 3.1.15 with CVE-2011-3205 fix...

CVE-2011-3205

Buffer overflow in the gopherToHTML function in gopher.cc in the Gopher reply parser in Squid 3.0 before 3.0.STABLE26, 3.1 before 3.1.15, and 3.2 before 3.2.0.11 allows remote Gopher servers to cause a denial of service memory corruption and daemon restart or possibly have unspecified other impac...

CVE-2011-3205

Buffer overflow in the gopherToHTML function in gopher.cc in the Gopher reply parser in Squid 3.0 before 3.0.STABLE26, 3.1 before 3.1.15, and 3.2 before 3.2.0.11 allows remote Gopher servers to cause a denial of service memory corruption and daemon restart or possibly have unspecified other impac...

CVE-2011-3205

CVE-2011-3205 affects Squid 3.0 before 3.0.STABLE26, 3.1 before 3.1.15, and 3.2 before 3.2.0.11. Description: a buffer overflow in gopherToHTML (gopher.cc) enables a remote Gopher server to trigger memory corruption and daemon restart (DoS) via a long line in a response; it is a regression tied t...

Textpattern CMS 'index.php' Remote File Inclusion Vulnerability

Textpattern CMS is prone to a remote file inclusion vulnerability. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

CVE-2010-3205

PHP remote file inclusion vulnerability in index.php in Textpattern CMS 4.2.0 allows remote attackers to execute arbitrary PHP code via a URL in the inc parameter...

CVE-2010-3205

CVE-2010-3205 affects Textpattern CMS 4.2.0. Affected component: index.php, with a PHP remote file inclusion vulnerability via the inc parameter, enabling execution of arbitrary PHP code by an attacker-controlled URL. Root cause: improper handling of the inc parameter leads to remote file inclusi...

CVE-2009-3205

The CVE-2009-3205 entry concerns an SQL injection vulnerability in CBAuthority’s main.php, exploitable through the id parameter in a view_product action. The underlying flaw allows remote attackers to alter the SQL executed by the application, leading to potential arbitrary SQL execution with the...

CVE-2009-3205

creationtimestamp| type| source ---|---|--- 2009-08-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9471...

CVE-2008-3205

creationtimestamp| type| source ---|---|--- 2008-10-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6042...

CVE-2008-3205

CVE-2008-3205 is a directory traversal vulnerability in the Easy-Script Wysi Wiki Wyg 1.0 web app, exploitable via a dot-dot sequence in the c parameter of index.php to read arbitrary files. The NVD entry gives a CVSSv2 base score of 5.0 (Medium) with network access, low attack complexity, no aut...