Squid Multiple Remote DoS Vulnerabilities (SQUID-2009:2)

Squid is prone to multiple remote denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Squid Multiple Remote Denial of Service Vulnerabilities

Squid is prone to multiple remote denial-of-service vulnerabilities. Successfully exploiting these issues allow remote attackers to crash the affected application, denying further service to legitimate users. This issue affects Squid 3.0.STABLE16, 3.1.0.11 and prior versions. OpenVAS Vulnerabilit...

openSUSE Security Update : squid (squid-535)

A Denial of service condition in HTTP-request processing was fixed in squid. CVE-2009-0478 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update squid-535. The text...

openSUSE Security Update : squid (squid-69)

This update of squid fixes a denial-of-service bug that can occur while parsing ASN.1. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update squid-69. The text description of this plugin is C SUSE...

Stable, Beta update: Security fix

Google Chrome 2.0.172.33 has been released to the Stable and Beta channels. This release fixes a critical security issue and two other networking bugs. CVE-2009-2121: Buffer overflow processing HTTP responses Google Chrome is vulnerable to a buffer overflow in handling certain responses from HTTP...

Proxy bypass vulnerability & plain text passwords in LevelOne AMG-2000

SEC Consult Security Advisory 20090429-0 ======================================================================= title: Proxy bypass vulnerability & plain text passwords in LevelOne AMG-2000 product: LevelOne AMG-2000 Wireless AP Management Gateway vulnerable version: Firmware =2.00.00build00600...

LevelOne AMG-2000 Wireless AP Proxy Bypass

SEC Consult Security Advisory ======================================================================= title: Proxy bypass vulnerability & plain text passwords in LevelOne AMG-2000 product: LevelOne AMG-2000 Wireless AP Management Gateway vulnerable version: Firmware =2.00.00build00600 impact:...

Fedora 10 : squid-3.0.STABLE13-1.fc10 (2009-1526)

Thu Feb 5 2009 Jonathan Steffan - 7:3.0.STABLE13-1 - upgrade to latest upstream - Thu Jan 29 2009 Henrik Nordstrom - 7:3.0.STABLE12-1 - upgrade to latest upstream - Fri Dec 19 2008 Henrik Nordstrom - 7:3.0.STABLE10-3 - actually include the upstream bugfixes in the build - Fri Dec 19 2008 Henrik...

FreeBSD : squid -- SNMP module denial-of-service vulnerability (65e99f52-1c5f-11d9-bc4a-000c41e2cdad)

The Squid-2.5 patches page notes : If a certain malformed SNMP request is received squid restarts with a Segmentation Fault error. This only affects squid installations where SNMP is explicitly enabled via 'make config'. As a workaround, SNMP can be disabled by defining 'snmpport 0' in squid.conf...

FreeBSD : Buffer overflow in Squid NTLM authentication helper (6f955451-ba54-11d8-b88c-000d610a3b12)

Remote exploitation of a buffer overflow vulnerability in the NTLM authentication helper routine of the Squid Web Proxy Cache could allow a remote attacker to execute arbitrary code. A remote attacker can compromise a target system if the Squid Proxy is configured to use the NTLM authentication...

Mandriva Linux Security Advisory : squid (MDVSA-2008:002)

The cache update reply processing functionality in Squid 2.x before 2.6.STABLE17, and Squid 3.0, allows remote attackers to cause a denial of service crash via unknown vectors related to HTTP headers. The updated package fixes this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

FreeBSD : squid ACL bypass due to URL decoding bug (705e003a-7f36-11d8-9645-0020ed76ef5a)

From the Squid advisory : Squid versions 2.5.STABLE4 and earlier contain a bug in the '%xx' URL decoding function. It may insert a NUL character into decoded URLs, which may allow users to bypass urlregex ACLs. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

Mandriva Linux Security Advisory : squid (MDVSA-2008:134)

An incorrect fix for CVE-2007-6239 resulted in Squid not performing proper bounds checking when processing cache update replies. Because of this, a remote authenticated user might have been able to trigger an assertion error and cause a denial of service CVE-2008-1612. The updated packages have...

Mandriva Linux Security Advisory : squid (MDVSA-2009:034)

Due to an internal error Squid is vulnerable to a denial of service attack when processing specially crafted requests. This problem allows any client to perform a denial of service attack on the Squid service CVE-2009-0478. The updated packages have been patched to adress this. %NASLMINLEVEL 7030...

Ubuntu 8.10 : squid vulnerability (USN-724-1)

Joshua Morin, Mikko Varpiola and Jukka Taimisto discovered that Squid did not properly validate the HTTP version when processing requests. A remote attacker could exploit this to cause a denial of service assertion failure. Note that Tenable Network Security has extracted the preceding descriptio...

Squid 2.7 / 3.0 Information Disclosure Vulnerability

According to its version number, the remote version of Squid is prone to an information disclosure vulnerability related to the interpretation of the Host HTTP header. Specifically, this issue occurs when the proxy makes a forwarding decision based on the Host HTTP header instead of the destinati...

Mandriva Update for squid MDKSA-2007:026 (squid)

Check for the Version of squid OpenVAS Vulnerability Test Mandriva Update for squid MDKSA-2007:026 squid Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Mandriva Update for squid MDKSA-2007:068 (squid)

Check for the Version of squid OpenVAS Vulnerability Test Mandriva Update for squid MDKSA-2007:068 squid Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Mandriva Update for squid MDKSA-2007:026 (squid)

Check for the Version of squid OpenVAS Vulnerability Test Mandriva Update for squid MDKSA-2007:026 squid Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Mandriva Update for squid MDVSA-2008:002 (squid)

Check for the Version of squid OpenVAS Vulnerability Test Mandriva Update for squid MDVSA-2008:002 squid Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...