6194 matches found
Squid 3.2.x < 3.2.13 / 3.3.x < 3.3.8 Port Handling DoS
Binary data 6932.prm...
Squid 3.x < 3.2.12 / 3.3.x < 3.3.7 idnsALookup HTTP Request DoS
Binary data 6931.prm...
Squid "idnsALookup()" DNS名称处理缓冲区溢出漏洞
Squid是一个高效的Web缓存及代理程序。 Squid 3.2 - 3.2.11、3.3 - 3.3.6在处理DNS查询生成请求时，"idnsALookup" 函数发生错误，攻击者通过发送特制的HTTP请求利用此漏洞可造成缓冲区溢出。 0 Squid 3.x 厂商补丁： Squid ----- Squid已经为此发布了一个安全公告（SQUID-20132）以及相应补丁: SQUID-20132：Buffer overflow in HTTP request handling 链接：http://www.squid-cache.org/Advisories/SQUID-20132.txt...
Squid 3.3.5 - Denial of Service (PoC)
Squid 3.3.5 - Denial of Service PoC Squid Crash PoC Copyright C Kingcope 2013 tested against squid-3.3.5 this seems to be the patch for the vulnerability: http://www.squid-cache.org/Versions/v3/3.3/squid-3.3.8.patch The squid-cache service will respawn, looks like a kind of assert exception:...
Squid-3.3.5 DoS PoC
Squid Crash PoC Copyright C Kingcope 2013 tested against squid-3.3.5 this seems to be the patch for the vulnerability: http://www.squid-cache.org/Versions/v3/3.3/squid-3.3.8.patch The squid-cache service will respawn, looks like a kind of assert exception: 2013/07/15 20:48:36 kid1| Closing HTTP...
Squid 3.3.5 Denial Of Service Vulnerability
Squid version 3.3.5 remote denial of service crash exploit. Squid Crash PoC Copyright C Kingcope 2013 tested against squid-3.3.5 this seems to be the patch for the vulnerability: http://www.squid-cache.org/Versions/v3/3.3/squid-3.3.8.patch The squid-cache service will respawn, looks like a kind o...
Squid 3.3.5 Denial Of Service
Squid Crash PoC Copyright C Kingcope 2013 tested against squid-3.3.5 this seems to be the patch for the vulnerability: http://www.squid-cache.org/Versions/v3/3.3/squid-3.3.8.patch The squid-cache service will respawn, looks like a kind of assert exception: 2013/07/15 20:48:36 kid1| Closing HTTP...
FreeBSD : squid -- denial of service (30a04ab4-ed7b-11e2-8643-8c705af55518)
Squid project reports : Due to incorrect data validation Squid is vulnerable to a denial of service attack when processing specially crafted HTTP requests This problem allows any client who can generate HTTP requests to perform a denial of service attack on the Squid service. %NASLMINLEVEL 70300 ...
Squid 3.3.5 - Denial of Service (PoC)
Squid Crash PoC Copyright C Kingcope 2013 tested against squid-3.3.5 this seems to be the patch for the vulnerability: http://www.squid-cache.org/Versions/v3/3.3/squid-3.3.8.patch The squid-cache service will respawn, looks like a kind of assert exception: 2013/07/15 20:48:36 kid1| Closing HTTP...
squid -- denial of service
Squid project reports: Due to incorrect data validation Squid is vulnerable to a denial of service attack when processing specially crafted HTTP requests This problem allows any client who can generate HTTP requests to perform a denial of service attack on the Squid service...
Oracle Linux 6 : squid (ELSA-2013-0505)
The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2013-0505 advisory. - Resolves: 888198 - CVE-2012-5643: improved upstream patch - Resolves: 888198 - CVE-2012-5643: patch - Resolves: 888198 - CVE-2012-5643: DoS excessive resource...
Oracle Linux 5 : Moderate: / squid (ELSA-2007-1130)
The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2007-1130 advisory. 2.5.STABLE3-8.3E - fix for 410181 - CVE-2007-6239 Squid DoS in cache updates 2.5.STABLE3-7 - resolves: 238103: 'forwardedfor off' in squid.conf does not work...
Oracle Linux 5 : Moderate: / squid (ELSA-2007-0131)
The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2007-0131 advisory. 2.6.STABLE6-4 - Resolves: rhbz233253 - CVE-2007-1560 Squid TRACE DoS Tenable has extracted the preceding description block directly from the Oracle Linux securi...
Oracle Linux 5 : squid (ELSA-2008-0214)
The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2008-0214 advisory. - fix for 439801 - regression introduced in fix for CVE-2007-6239 Tenable has extracted the preceding description block directly from the Oracle Linux security...
Oracle Linux 6 : squid (ELSA-2011-1791)
The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2011-1791 advisory. -7:3.1.10-1.el62.1 - Resolves: 755016 - CVE-2011-4096: Invalid free by processing CNAME DNS record Tenable has extracted the preceding description block directl...
Oracle Linux 6 : squid (ELSA-2011-1293)
The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2011-1293 advisory. 7:3.1.10-1.el61.1 - Resolves: 735447 - CVE-2011-3205 squid: buffer overflow flaw in Squid's Gopher reply parser Tenable has extracted the preceding description...
Squid Proxy strHdrAcptLangGetItem Value Denial of Service (CVE-2013-1839)
A denial of service vulnerability has been reported in Squid proxy server...
Squid Proxy httpMakeVaryMark Header Value Denial of Service
A denial-of-service vulnerability has been reported in Squid Proxy...
Squid Proxy Oversized Reply Header Handling - Improved Performance (CVE-2005-0241)
A denial of service vulnerability has been reported in Squid Web Proxy Cache server...
Mandriva Linux Security Advisory : squid (MDVSA-2013:129)
Updated squid packages fix security vulnerability : Due to missing input validation, the Squid cachemgr.cgi tool in Squid before 3.1.22 and 3.2.4 is vulnerable to a denial of service attack when processing specially crafted requests CVE-2012-5643. It was discovered that the patch for CVE-2012-564...