多个HTTP代理HTTP Host头错误中继行为漏洞

BUGTRAQ ID: 33858 RFC 2616中所定义的HTTP Host头规范允许多个站点共享单个IP地址。 透明代理服务器无需用户交互或浏览器配置便拦截并重新定向网络连接，而很多以透明模式运行的代理服务器基于HTTP host-header值判断连接。Flash、Java等浏览器插件可能通过限制与内容所来源的站点或域的通讯对活动内容强制访问控制。攻击者可以通过活动内容来伪造主机头的值，这样以透明模式运行的代理服务器就会基于这个伪造的值来确定连接，因此攻击者可以连接到代理可连接到的任何网站或资源，包括通常不会暴露给Internet的内网资源。 Qbik WinGate 6.x...

Squid HTTP Version Number Parsing Denial of Service (CVE-2009-0478)

The Squid proxy server is a popular open source, Internet proxy and web caching application. A denial of service vulnerability has been reported in Squid proxy. The vulnerability is due to an error within the Squid proxy that fails to properly parse version numbers when processing malformed HTTP...

Fedora Update for squid FEDORA-2008-6045

Check for the Version of squid OpenVAS Vulnerability Test Fedora Update for squid FEDORA-2008-6045 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Fedora Update for squid FEDORA-2008-6045

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for squid FEDORA-2008-2740

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for awstats FEDORA-2008-10962

Check for the Version of awstats OpenVAS Vulnerability Test Fedora Update for awstats FEDORA-2008-10962 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for squid FEDORA-2008-2740

Check for the Version of squid OpenVAS Vulnerability Test Fedora Update for squid FEDORA-2008-2740 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Fedora Core 9 FEDORA-2009-1517 (squid)

The remote host is missing an update to squid announced via advisory FEDORA-2009-1517. OpenVAS Vulnerability Test $Id: fcore20091517.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-1517 squid Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Fedora Core 10 FEDORA-2009-1526 (squid)

The remote host is missing an update to squid announced via advisory FEDORA-2009-1526. OpenVAS Vulnerability Test $Id: fcore20091526.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-1526 squid Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

FreeBSD Ports: squid

The remote host is missing an update to the system as announced in the referenced advisory. VID 9c2460a4-f6b1-11dd-94d9-0030843d3802 OpenVAS Vulnerability Test $ Description: Auto generated from VID 9c2460a4-f6b1-11dd-94d9-0030843d3802 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Fedora Core 10 FEDORA-2009-1526 (squid)

The remote host is missing an update to squid announced via advisory FEDORA-2009-1526. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 9 FEDORA-2009-1517 (squid)

The remote host is missing an update to squid announced via advisory FEDORA-2009-1517. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

FreeBSD Ports: squid

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Mandrake Security Advisory MDVSA-2009:034 (squid)

The remote host is missing an update to squid announced via advisory MDVSA-2009:034. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Fedora 9 : squid-3.0.STABLE13-1.fc9 (2009-1517)

Thu Feb 5 2009 Jonathan Steffan - 7:3.0.STABLE13-1 - upgrade to latest upstream - Thu Jan 29 2009 Henrik Nordstrom - 7:3.0.STABLE12-1 - upgrade to latest upstream - Fri Dec 19 2008 Henrik Nordstrom - 7:3.0.STABLE10-3 - actually include the upstream bugfixes in the build - Fri Dec 19 2008 Henrik...

Mandrake Security Advisory MDVSA-2009:034 (squid)

The remote host is missing an update to squid announced via advisory MDVSA-2009:034. OpenVAS Vulnerability Test $Id: mdksa2009034.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:034 squid Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

[SECURITY] Fedora 9 Update: squid-3.0.STABLE13-1.fc9

Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DN...

[SECURITY] Fedora 10 Update: squid-3.0.STABLE13-1.fc10

Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DN...

Squid Web代理缓存HTTP版本号解析拒绝服务漏洞

BUGTRAQ ID: 33604 CVECAN ID: CVE-2009-0478 Squid是一个高效的Web缓存及代理程序，最初是为Unix平台开发的，现在也被移植到Linux和大多数的Unix类系统中，最新的Squid可以运行在Windows平台下。 Squid没有正确地处理畸形的HTTP版本号，远程客户端可以向服务器发送特制请求导致拒绝服务的情况。 Squid Web Proxy Cache 3.1 Squid Web Proxy Cache 3.0 Squid Web Proxy Cache 2.7 厂商补丁： Squid -----...

Squid < 3.1 5 HTTP Version Number Parsing Denial of Service Exploit

No description provided by source. !usr/bin/perl -w Reference: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-0478 http://www.securityfocus.com/bid/33604/discuss $$$$$This was strictly written for educational purpose. Use it at your own risk.$$$$$ $$$$$Author will not bare any...