CVE-2008-7250

The CVE-2008-7250 entry describes a Cross-site scripting (XSS) vulnerability in Squid Analysis Report Generator (Sarg) 2.2.4. An attacker could inject arbitrary web script or HTML via a JavaScript onload event in the User-Agent header, which is mishandled when displaying the Squid proxy log. The ...

CVE-2008-7249

CVE-2008-7249 : A buffer overflow in Squid Analysis Report Generator (Sarg) 2.2.3.1 (and likely later) allows user-assisted remote attackers to execute arbitrary code via a long HTTP request method in a crafted access.log file. This is a standalone vulnerability distinct from CVE-2008-1167. Affec...

CVE-2008-7249

Buffer overflow in Squid Analysis Report Generator Sarg 2.2.3.1, and probably later, allows user-assisted remote attackers to execute arbitrary code via a long HTTP request method in a crafted access.log file, a different vulnerability than CVE-2008-1167...

CVE-2008-7250

Cross-site scripting XSS vulnerability in Squid Analysis Report Generator Sarg 2.2.4 allows remote attackers to inject arbitrary web script or HTML via a JavaScript onload event in the User-Agent header, which is not properly handled when displaying the Squid proxy log. NOTE: this issue exists...

CVE-2009-4454

vccleaner in VideoCache 1.9.2 allows local users with Squid proxy user privileges to overwrite arbitrary files via a symlink attack on /var/log/videocache/vccleaner.log...

VideoCache vccleaner File Deletion

==== SYNOPSIS ===================================================== VideoCache is a Squid URL rewriter plugin written in Python for bandwidth optimization while browsing video sharing websites. Version 1.9.2 allows a user with the privileges of the Squid proxy server to append semi-arbitrary data...

VideoCache 1.9.2 - 'vccleaner' Local Privilege Escalation

==== SYNOPSIS ===================================================== VideoCache is a Squid URL rewriter plugin written in Python for bandwidth optimization while browsing video sharing websites. Version 1.9.2 allows a user with the privileges of the Squid proxy server to append semi-arbitrary data...

VideoCache for squid privilege escalation

It's possible to elevate privileges from squid to root user if root executes vccleane script...

VideoCache 1.9.2 - vccleaner Local Privilege Escalation

VideoCache 1.9.2 - vccleaner Local Privilege Escalation ==== SYNOPSIS ===================================================== VideoCache is a Squid URL rewriter plugin written in Python for bandwidth optimization while browsing video sharing websites. Version 1.9.2 allows a user with the privileges...

VideoCache 1.9.2 vccleaner root vulnerability

Exploit for unknown platform in category local exploits ============================================= VideoCache 1.9.2 vccleaner root vulnerability ============================================= Title: VideoCache 1.9.2 vccleaner root vulnerability CVE-ID: OSVDB-ID: Author: Dominick LaTrappe...

VideoCache 1.9.2 vccleaner root vulnerability

==== SYNOPSIS ===================================================== VideoCache is a Squid URL rewriter plugin written in Python for bandwidth optimization while browsing video sharing websites. Version 1.9.2 allows a user with the privileges of the Squid proxy server to append semi-arbitrary data...

VideoCache 1.9.2 vccleaner root vulnerability

No description provided by source. ==== SYNOPSIS ===================================================== VideoCache is a Squid URL rewriter plugin written in Python for bandwidth optimization while browsing video sharing websites. Version 1.9.2 allows a user with the privileges of the Squid proxy...

Squid Gopher Protocol Handling Buffer Overflow (CVE-2005-0094)

Squid is a full featured, open source web proxy caching server. It supports proxying of variety of protocols including FTP, HTTP, DNS and Gopher. A vulnerability exists in the way Squid web proxy handles responses from Gopher servers. An overly long line in a Gopher response can overflow a fixed...

Squid Proxy FTP URI Processing Denial of Service (CVE-2007-0247)

The Squid proxy server is a popular open source, Internet proxy and web caching application. It has a wide variety of uses, from speeding up a web server by caching repeated requests, to caching web, DNS and other network lookups for a group of people sharing network resources. It is primarily...

MDVA-2009:199 : squid

This is a bugfix and maintenance release for squid that upgrades squid to 3.0.STABLE20 and fixes some bugs: An outstanding issue with code 304 and code 200 replies being mixed up has now been resolved. This means requests which need to refresh cache objects will not cause temporary client softwar...

Squid Authentication Headers Handling Denial of Service (CVE-2005-2917)

The Squid proxy server is an open source, Internet proxy and caching application. It supports the proxying of FTP, HTTP, SSL, and DNS services. The default proxy service port is 3128/TCP. A vulnerability exists in the Squid proxy server in the processing of authentication requests. The flaw is...

Buffer overflow

Multiple buffer overflows in squidGuard 1.4 allow remote attackers to bypass intended URL blocking via a long URL, related to 1 the relationship between a certain buffer size in squidGuard and a certain buffer size in Squid and 2 a redirect URL that contains information about the originally...

DEBIAN-CVE-2009-3826

Multiple buffer overflows in squidGuard 1.4 allow remote attackers to bypass intended URL blocking via a long URL, related to 1 the relationship between a certain buffer size in squidGuard and a certain buffer size in Squid and 2 a redirect URL that contains information about the originally...

Squid SNMP Parser ASN.1 Header Parsing Denial of Service (CVE-2004-0918)

Squid is a full featured, open source web proxy caching server. It supports proxying FTP, HTTP, SSL, DNS and has support for Simple Network Management Protocol SNMP. There is a vulnerability in the way Squid web proxy parses SNMP messages. An SNMP message with specially crafted ASN.1 length field...

Squid NTLM Authenticate Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Squid NTLM...