PT-2012-3886 · Squid · Squid +1

Name of the Vulnerable Software and Affected Versions: Squid version 3.1.9 Description: The issue allows remote attackers to bypass the access configuration for the CONNECT method by providing an arbitrary allowed hostname in the Host HTTP header. Note that this issue might not be reproducible du...

Squid / McAfee Web Gateway URL filtering bypass

Server trusts to Host: header in CONNECT request...

Squid URL Filtering Bypass

Exploit Title: Squid URL Filtering Bypass Date: 16/04/2012 Author: Gabriel Menezes Nunes Version: Squid Proxy Tested on: Squid Proxy 3.1.19 CVE: CVE-2012-2213 I found a vulnerability in Squid Proxy that allows access to filtered sites. The software believes in the Host field of HTTP Header using...

Squid Proxy 'Host' HTTP标头安全限制绕过漏洞

BUGTRAQ ID: 53024 Squid是一个高效的Web缓存及代理程序，最初是为Unix平台开发的，现在也被移植到Linux和大多数的Unix类系统中，最新的Squid可以运行在Windows平台下。 Squid Proxy在过滤规则的实现上存在安全漏洞，成功攻击可允许攻击者绕过某些安全限制。 0 Squid Web Proxy Cache 3.1.19 厂商补丁： Squid ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.squid-cache.org import...

Fedora Update for squid FEDORA-2011-11728

Check for the Version of squid OpenVAS Vulnerability Test Fedora Update for squid FEDORA-2011-11728 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

Fedora Update for squid FEDORA-2011-11728

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Squid Proxy Port Scanner

A exposed Squid proxy will usually allow an attacker to make requests on their behalf. If misconfigured, this may give the attacker information about devices that they cannot normally reach. For example, an attacker may be able to make requests for internal IP addresses against an open Squid prox...

Gentoo Security Advisory GLSA 201110-24 (Squid)

The remote host is missing updates announced in advisory GLSA 201110-24. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Gentoo Security Advisory GLSA 201110-24 (Squid)

The remote host is missing updates announced in advisory GLSA 201110-24. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Debian Security Advisory DSA 2381-1 (squid3)

The remote host is missing an update to squid3 announced via advisory DSA 2381-1. OpenVAS Vulnerability Test $Id: deb23811.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2381-1 squid3 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Squid Unsupported Version Detection

According to its self-reported version number, the installation of Squid running on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities. C Tenable...

SuSE 11.1 Security Update : squid (SAT Patch Number 5584)

This update fixes the following security issue : - 587375: squid NULL deref via HTCP request CVE-2010-0639 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C...

Squid DNS Replies Invalid Free Code Execution (CVE-2011-4096)

A remote code execution vulnerability has been reported in the Squid proxy server. The vulnerability is due to an error while processing certain DNS replies. An attacker may exploit this issue by enticing affected users to open a link containing a host name, which will cause a malicious DNS reply...

DSA-2381-1 squid3 - invalid memory deallocation

Bulletin has no description...

squid proxy server buffer overflow

Crash on DNS response parsing...

[ MDVSA-2011:193 ] squid

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2011:193 http://www.mandriva.com/security/ Package : squid Date : December 27, 2011 Affected: 2011. Problem Description: A vulnerability has been discovered and corrected in squid: The idnsGrokReply function in...

CentOS 6 : squid (CESA-2011:1791)

An updated squid package that fixes one security issue is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

squid security update

CentOS Errata and Security Advisory CESA-2011:1791 An updated squid package that fixes one security issue is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base...

squid security update

-7:3.1.10-1.el62.1 - Resolves: 755016 - CVE-2011-4096: Invalid free by processing CNAME DNS record...

Squid 3.1.x < 3.1.16 / 3.2.x < 3.2.0.13 DNS Replies CName Record Parsing Remote DoS

According to its banner, the version of Squid is 3.1.x earlier than than 3.1.16 or 3.2.x earlier than 3.2.0.13. Such versions are affected by a denial of service vulnerability. The application does not properly free memory when handling DNS replies containing a CNAME record that references anothe...