CVE-2011-3205

Buffer overflow in the gopherToHTML function in gopher.cc in the Gopher reply parser in Squid 3.0 before 3.0.STABLE26, 3.1 before 3.1.15, and 3.2 before 3.2.0.11 allows remote Gopher servers to cause a denial of service memory corruption and daemon restart or possibly have unspecified other impac...

Buffer overflow

Buffer overflow in the gopherToHTML function in gopher.cc in the Gopher reply parser in Squid 3.0 before 3.0.STABLE26, 3.1 before 3.1.15, and 3.2 before 3.2.0.11 allows remote Gopher servers to cause a denial of service memory corruption and daemon restart or possibly have unspecified other impac...

CVE-2011-3205

Buffer overflow in the gopherToHTML function in gopher.cc in the Gopher reply parser in Squid 3.0 before 3.0.STABLE26, 3.1 before 3.1.15, and 3.2 before 3.2.0.11 allows remote Gopher servers to cause a denial of service memory corruption and daemon restart or possibly have unspecified other impac...

CVE-2011-3205

CVE-2011-3205 affects Squid 3.0 before 3.0.STABLE26, 3.1 before 3.1.15, and 3.2 before 3.2.0.11. Description: a buffer overflow in gopherToHTML (gopher.cc) enables a remote Gopher server to trigger memory corruption and daemon restart (DoS) via a long line in a response; it is a regression tied t...

CVE-2011-3205

Buffer overflow in the gopherToHTML function in gopher.cc in the Gopher reply parser in Squid 3.0 before 3.0.STABLE26, 3.1 before 3.1.15, and 3.2 before 3.2.0.11 allows remote Gopher servers to cause a denial of service memory corruption and daemon restart or possibly have unspecified other impac...

PT-2011-1085 · Squid +2 · Squid +3

Name of the Vulnerable Software and Affected Versions: Squid versions 3.0 through 3.0.STABLE25 Squid versions 3.1 through 3.1.14 Squid versions 3.2 through 3.2.0.10 Description: The issue is related to a buffer overflow in the gopherToHTML function in the Gopher reply parser. This can be exploite...

Squid Proxy Gopher Remote Buffer Overflow Vulnerability

Squid Proxy is prone remote buffer-overflow vulnerability affects the Gopher-to-HTML functionality. An attacker can exploit this issue to execute arbitrary code with the privileges of the vulnerable application. Failed exploit attempts will result in a denial-of-service condition. OpenVAS...

Squid Gopher Remote Buffer Overflow Vulnerability (SQUID-2011:3)

Squid is prone remote buffer-overflow vulnerability affects the Gopher-to-HTML functionality. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only C...

Squid Gopher应答处理缓冲区溢出漏洞

Squid是一款功能强大的代理服务器和Web缓存服务器。 Squid解析来自Gopher服务器上的应答时存在缺陷，如果Gopher服务器返回的行超过4096字节可触发缓冲区溢出，此溢出可导致内存破坏一般可使Squid崩溃。 恶意用户必须设置伪造的Gopher服务器，并转发请求通过Squid。成功利用漏洞允许以服务器上下文执行任意代码。 Squid 3.x 厂商解决方案 Squid 3.0.STABLE26或3.1.15版本已经修复此漏洞，建议用户下载使用： http://www.squid-cache.org/...

HTTPKiller - (Global HTTP DoS)

Connection Keep-Alive + Pipelining + Close the connection before the response + Something... = DoS Apache, IIS, Squid, NetCache, What else?...

squid security and bug fix update

3.1.10-1 - Resolves: 639365 - Rebase squid to version 3.1.10 - Resolves: 666533 - small memleak in squid-3.1.4...

RHEL 6 : squid (RHSA-2011:0545)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2011:0545 advisory. Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. It was found that string comparison...

Squid: Denial of service due internal error in string handling (SQUID-2010:3)

The string-comparison functions in String.cci in Squid 3.x before 3.1.8 and 3.2.x before 3.2.0.2 allow remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted request...

Low: Red Hat Security Advisory: squid security and bug fix update

An updated squid package that fixes one security issue and two bugs is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...

Squid WCCP Message Receive Buffer Overflow (CVE-2005-0211)

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. An attacker can exploit this vulnerability to terminate the vulnerable product, creating a denial of service condition, or it can be exploited for code. A remote vulnerability was found in Squid web proxy/cache processes...

Squid-Imposter: A Squid Based Sidejacking Proxy !

That tool was meant specifically for Windows operating systems and also contains a module that uses HTML5 offline cache to store the payload permanently in all supporting browsers. Squid-Imposter just add the HTML5 offline cache storage functionality to the application and has been ported to Linu...

Fedora Update for squid FEDORA-2010-14149

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for squid FEDORA-2010-14149

Check for the Version of squid OpenVAS Vulnerability Test Fedora Update for squid FEDORA-2010-14149 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

CVE-2010-2951

dnsinternal.cc in Squid 3.1.6, when IPv6 DNS resolution is not enabled, accesses an invalid socket during an IPv4 TCP DNS query, which allows remote attackers to cause a denial of service assertion failure and daemon exit via vectors that trigger an IPv4 DNS response with the TC bit set...

Design/Logic Flaw

dnsinternal.cc in Squid 3.1.6, when IPv6 DNS resolution is not enabled, accesses an invalid socket during an IPv4 TCP DNS query, which allows remote attackers to cause a denial of service assertion failure and daemon exit via vectors that trigger an IPv4 DNS response with the TC bit set...