USN-1713-1: Squid vulnerabilities

It was discovered that squid's cachemgr.cgi was vulnerable to excessive resource use. A remote attacker could exploit this flaw to perform a denial of service attack on the server and other hosted services. CVE-2012-5643 It was discovered that the patch for CVE-2012-5643 was incorrect. A remote...

Squid Proxy Cache cachemgr.cgi Resource Exhaustion (CVE-2012-5643)

A resource exhaustion vulnerability has been reported in Squid Proxy Cache Manager. The vulnerability is due to missing input validation in the cachemgr.cgi tool. A remote, unauthenticated attacker can send specially crafted POST requests to cause cachemgr.cgi to use large amounts of memory...

Fedora Update for squid FEDORA-2012-20537

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for squid FEDORA-2012-20537

Check for the Version of squid OpenVAS Vulnerability Test Fedora Update for squid FEDORA-2012-20537 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

CVE-2012-5643

The CVE-2012-5643 entry describes memory leaks in cachemgr.cgi of Squid 2.x/3.x (pre-3.1.22, pre-3.2.4, pre-3.3.0.2) enabling remote DoS via invalid Content-Length headers, long POSTs, or crafted credentials. Connected advisories confirm this causes memory consumption and potential DoS, with mult...

CVE-2012-5643

Multiple memory leaks in tools/cachemgr.cc in cachemgr.cgi in Squid 2.x and 3.x before 3.1.22, 3.2.x before 3.2.4, and 3.3.x before 3.3.0.2 allow remote attackers to cause a denial of service memory consumption via 1 invalid Content-Length headers, 2 long POST requests, or 3 crafted authenticatio...

CVE-2008-5643

The CVE-2008-5643 issue affects the Joomla! Books (com_books) component. The vulnerability is a SQL injection in the book_details action, where the book_id parameter can be manipulated to execute arbitrary SQL commands. This allows remote attackers to perform database operations on the affected J...

CVE-2008-5643

creationtimestamp| type| source ---|---|--- 2008-11-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7092...

CVE-2006-5643

CVE-2006-5643 is an XSS vulnerability in foresite CMS, affecting the search_de.html handler where an attacker can inject arbitrary script/HTML through the query parameter. The connected documents confirm the issue and provide CVSS metrics (base score 6.8, MEDIUM) and affected behavior, but they d...