463 matches found
CVE-2008-1168
Cross-site scripting XSS vulnerability in Squid Analysis Report Generator Sarg 2.2.3.1 allows remote attackers to inject arbitrary web script or HTML via the User-Agent header, which is not properly handled when displaying the Squid proxy log. NOTE: the provenance of this information is unknown;...
CVE-2008-1167
Stack-based buffer overflow in the useragent function in useragent.c in Squid Analysis Report Generator Sarg 2.2.3.1 allows remote attackers to execute arbitrary code via a long Squid proxy server User-Agent header. NOTE: some of these details are obtained from third party information...
Cross site scripting
Cross-site scripting XSS vulnerability in Squid Analysis Report Generator Sarg 2.2.3.1 allows remote attackers to inject arbitrary web script or HTML via the User-Agent header, which is not properly handled when displaying the Squid proxy log. NOTE: the provenance of this information is unknown;...
CVE-2008-1167
CVE-2008-1167: Stack-based buffer overflow in Squid Analysis Report Generator (Sarg) 2.2.3.1, in the useragent function (useragent.c). Remote attackers can execute arbitrary code via a long Squid proxy server User-Agent header. NOTE: some details are from third party information. The provided doc...
CVE-2008-1167
Stack-based buffer overflow in the useragent function in useragent.c in Squid Analysis Report Generator Sarg 2.2.3.1 allows remote attackers to execute arbitrary code via a long Squid proxy server User-Agent header. NOTE: some of these details are obtained from third party information...
Squid Proxy缓存更新回复处理远程拒绝服务漏洞
Squid Proxy是一款开放源代码的流行的代理服务程序。 Squid Proxy在处理部分缓存更新回复处理时缺少正确的边界检查，远程攻击者可以利用漏洞对Squid服务进行拒绝服务攻击。 目前没有详细漏洞细节提供。 Squid Web Proxy Cache 3.0 PRE3 Squid Web Proxy Cache 3.0 PRE2 Squid Web Proxy Cache 3.0 PRE1 Squid Web Proxy Cache 3.0 Squid Web Proxy Cache 2.5 .STABLE9 + Debian Linux 3.1 sparc + Debian...
Squid Proxy TRACE Request Remote Denial of Service (CVE-2007-1560)
The Squid proxy server is a popular open source, Internet proxy and web caching application. A remote attacker can exploit this flaw by specially crafting a TRACE request and sending it to a vulnerable system. Successful exploitation may allow an attacker to create a denial of service condition o...
Squid Proxy TRACE请求远程拒绝服务漏洞
Squid Proxy是一款开放源始码的代理服务程序。 Squid Proxy处理TRACE请求方式存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 此问题允许任意可信的客户端使用这个服务进行拒绝服务攻击，目前没有详细漏洞细节提供。 Squid Web Proxy Cache 2.6 请使用如下补丁： Squid Web Proxy Cache 2.6 Squid 11349.patch http://www.squid-cache.org/Versions/v2/2.6/changesets/11349.patch...
Squid Proxy 2.52.6 - FTP URI Remote Denial of Service
Squid Proxy 2.52.6 - FTP URI Remote Denial of Service source: https://www.securityfocus.com/bid/22079/info Squid is prone to a remote denial-of-service vulnerability because the proxy server fails to handle certain FTP requests. Successfully exploiting this issue allows remote attackers to crash...
Squid Proxy 2.5/2.6 - FTP URI Remote Denial of Service
source: https://www.securityfocus.com/bid/22079/info Squid is prone to a remote denial-of-service vulnerability because the proxy server fails to handle certain FTP requests. Successfully exploiting this issue allows remote attackers to crash affected proxy applications, denying futher service to...
Moderate: Red Hat Security Advisory: squid security update
Updated squid packages that fix a security vulnerability as well as several bugs are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HT...
RHEL 4 : squid (RHSA-2006:0052)
The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2006:0052 advisory. Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. A denial of service flaw was found i...
Squid proxy server DNS reply spoofing
Blind DNS server reply spoofing is possible...
CVE-2005-0813
Buffer overflow in Initial Redirect ir Squid Proxy Plug-In 0.1 and 0.2 may allow attackers to cause a denial of service and execute arbitrary code via unknown vectors...
CVE-2005-0813
Buffer overflow in Initial Redirect ir Squid Proxy Plug-In 0.1 and 0.2 may allow attackers to cause a denial of service and execute arbitrary code via unknown vectors...
CVE-2005-0813
The CVE-2005-0813 entry describes a buffer overflow in the Initial Redirect (ir) Squid Proxy Plug-In versions 0.1 and 0.2. The underlying flaw is a buffer overflow in the plug-in, with potential impacts including denial of service and arbitrary code execution. The description notes that exploitat...
Squid proxy Set-Cookie header race conditions cookie leak
Race condition leads to the situation Set-Cookie header is leaked to different connection...
security flaw
The NTLM component in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service crash via a malformed NTLM type 3 message that triggers a NULL dereference...
