squids ICAP implementation lacks a defer check when reading from ICAP server

squids ICAP implementation does not check mem-store size before reading from an ICAP-server. If the user does not confirm browsers download-message-box, squid keeps on reading data from the ICAP server into the memory store, whilst no more data can be delivered to the client. Thus the memory stor...

squid proxy server DoS

Invalid cash update reply processing...

Squid remote denial-of-service vulnerability

Overview The Squid Proxy server contains a vulnerability that may allow an attacker to create a denial-of-service condition that affects the Squid server and systems that rely on it. Description Squid Proxy Cache is a caching proxy that supports the HTTP, HTTPS, and FTP protocols. Squid can also ...

Squid Proxy缓存更新回复处理远程拒绝服务漏洞

Squid Proxy是一款开放源代码的流行的代理服务程序。 Squid Proxy在处理部分缓存更新回复处理时缺少正确的边界检查，远程攻击者可以利用漏洞对Squid服务进行拒绝服务攻击。 目前没有详细漏洞细节提供。 Squid Web Proxy Cache 3.0 PRE3 Squid Web Proxy Cache 3.0 PRE2 Squid Web Proxy Cache 3.0 PRE1 Squid Web Proxy Cache 3.0 Squid Web Proxy Cache 2.5 .STABLE9 + Debian Linux 3.1 sparc + Debian...

FreeBSD : Squid -- Denial of Service Vulnerability (6eb580d7-a29c-11dc-8919-001c2514716c)

Squid secuirty advisory reports : Due to incorrect bounds checking Squid is vulnerable to a denial of service check during some cache update reply processing. This problem allows any client trusted to use the service to perform a denial of service attack on the Squid service. %NASLMINLEVEL 70300 ...

SQUID-2007:2, Dec 4, 2007

Squid Proxy Cache Security Update Advisory SQUID-2007:2 Advisory ID: SQUID-2007:2 Date: November 27, 2007 Summary: Denial of service in cache updates Affected versions: Squid 2.X 2.0 - 2.6.STABLE16; Squid-3. Fixed in version: Squid 2.6.STABLE17; November 28 Squid-2 snapshot November 28 Squid-3...

CVE-2007-6239

The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0 allows remote attackers to cause a denial of service crash via unknown vectors related to HTTP headers and an Array memory leak during requests for cached objects...

Memory corruption

The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0 allows remote attackers to cause a denial of service crash via unknown vectors related to HTTP headers and an Array memory leak during requests for cached objects...

CVE-2007-6239

The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0 allows remote attackers to cause a denial of service crash via unknown vectors related to HTTP headers and an Array memory leak during requests for cached objects...

CVE-2007-6239

The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0 allows remote attackers to cause a denial of service crash via unknown vectors related to HTTP headers and an Array memory leak during requests for cached objects...

DEBIAN-CVE-2007-6239

The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0 allows remote attackers to cause a denial of service crash via unknown vectors related to HTTP headers and an Array memory leak during requests for cached objects...

CVE-2007-6239

The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0 allows remote attackers to cause a denial of service crash via unknown vectors related to HTTP headers and an Array memory leak during requests for cached objects...

CVE-2007-6239

The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0 allows remote attackers to cause a denial of service crash via unknown vectors related to HTTP headers and an Array memory leak during requests for cached objects...

CVE-2007-6239

CVE-2007-6239 affects Squid 2.x up to 2.6.STABLE17 and Squid 3.0. A flaw in cache update reply processing can cause denial of service by exhausting memory (array/memory leak) during requests for cached objects, via remote attackers. The issue is triggered by HTTP header handling and related array...

Squid < 2.6.STABLE18 Cache Update Reply Unspecified DoS

According to its banner, the version of the Squid proxy caching server installed on the remote host is older than 2.6.STABLE18. Such versions reportedly use incorrect bounds checking when processing some cache update replies. A client trusted to use the service may be able to leverage this issue ...

Squid -- Denial of Service Vulnerability

Squid secuirty advisory reports: Due to incorrect bounds checking Squid is vulnerable to a denial of service check during some cache update reply processing. This problem allows any client trusted to use the service to perform a denial of service attack on the Squid service...

Ubuntu 6.10 : squid vulnerability (USN-441-1)

A flaw was discovered in Squid's handling of the TRACE request method which could lead to a crash. Remote attackers with access to the Squid server could send malicious TRACE requests, and cause a denial of service. Note that Tenable Network Security has extracted the preceding description block...

Ubuntu 6.06 LTS / 6.10 : squid vulnerabilities (USN-414-1)

David Duncan Ross Palmer and Henrik Nordstrom discovered that squid incorrectly handled special characters in FTP URLs. Remote users with access to squid could crash the server leading to a denial of service. CVE-2007-0247 Erick Dantas Rotole and Henrik Nordstrom discovered that squid could end u...

CVE-2002-2414

Opera 6.0.3, when used with Squid 2.4 as an HTTPS proxy, does not properly handle accepting a non-global certificate authority (CA) certificate from a site before establishing a subsequent HTTPS connection, which can allow remote attackers to cause a denial of service (crash). The connected docum...

CVE-2002-2414

Opera 6.0.3, when using Squid 2.4 for HTTPS proxying, does not properly handle when accepting a non-global certificate authority CA certificate from a site and establishing a subsequent HTTPS connection, which allows remote attackers to cause a denial of service crash...