openSUSE 10 Security Update : squid (squid-3036)

This update fixes a remote denial of service problem in Squid 2.6 CVE-2007-1560. Other Squid versions are not affected. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update squid-3036. The text...

openSUSE 10 Security Update : squid (squid-2504)

This update fixes a remotely exploitable denial-of-service bug in squid, that can be triggered by using special ftp:// URLs. CVE-2007-0247 Additionally the 10.2 package needed a fix for another DoS bug CVE-2007-0248 and for maxuserip handling in ntlmauth. %NASLMINLEVEL 70300 C Tenable Network...

Moderate: squid security update

2.6.STABLE6-4 - Resolves: rhbz233253 - CVE-2007-1560 Squid TRACE DoS...

RHEL 5 : squid (RHSA-2007:0131)

An updated squid package that fixes a security vulnerability is now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Squid is a high-performance proxy caching server for Web clients, supporting FTP,...

Squid Proxy TRACE Request Remote Denial of Service (CVE-2007-1560)

The Squid proxy server is a popular open source, Internet proxy and web caching application. A remote attacker can exploit this flaw by specially crafting a TRACE request and sending it to a vulnerable system. Successful exploitation may allow an attacker to create a denial of service condition o...

GLSA-200703-27 : Squid: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200703-27 Squid: Denial of Service Squid incorrectly handles TRACE requests that contain a 'Max-Forwards' header field with value '0' in the clientProcessRequest function. Impact : A remote attacker can send specially crafted TRAC...

Moderate: Red Hat Security Advisory: squid security update

An updated squid package that fixes a security vulnerability is now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Squid is a high-performance proxy caching server for Web clients, supporting FTP,...

security flaw

The clientProcessRequest function in src/clientside.c in Squid 2.6 before 2.6.STABLE12 allows remote attackers to cause a denial of service daemon crash via crafted TRACE requests that trigger an assertion error...

Squid: Denial of service

Background Squid is a multi-protocol proxy server. Description Squid incorrectly handles TRACE requests that contain a "Max-Forwards" header field with value "0" in the clientProcessRequest function. Impact A remote attacker can send specially crafted TRACE HTTP requests that will terminate the...

USN-441-1: Squid vulnerability

A flaw was discovered in Squid's handling of the TRACE request method which could lead to a crash. Remote attackers with access to the Squid server could send malicious TRACE requests, and cause a denial of service...

FreeBSD : Squid -- TRACE method handling denial of service (c27bc173-d7aa-11db-b141-0016179b2dd5)

Squid advisory 2007:1 notes : Due to an internal error Squid-2.6 is vulnerable to a denial of service attack when processing the TRACE request method. Workarounds : To work around the problem deny access to using the TRACE method by inserting the following two lines before your first httpaccess...

Mandrake Linux Security Advisory : squid (MDKSA-2007:068)

Due to an internal error Squid-2.6 is vulnerable to a denial of service attack when processing the TRACE request method. This problem allows any client trusted to use the service to perform a denial of service attack on the Squid service. Updated packages have been patched to address this issue...

squid cache proxy DoS

DoS on processing TRACE method...

[ MDKSA-2007:068 ] - Updated squid packages fix DoS vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:068 http://www.mandriva.com/security/ Package : squid Date : March 22, 2007 Affected: 2006.0, 2007.0, Corporate 3.0, Corporate 4.0, Multi Network Firewall 2.0 Problem Description: Due to an internal error...

Squid Proxy TRACE请求远程拒绝服务漏洞

Squid Proxy是一款开放源始码的代理服务程序。 Squid Proxy处理TRACE请求方式存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 此问题允许任意可信的客户端使用这个服务进行拒绝服务攻击，目前没有详细漏洞细节提供。 Squid Web Proxy Cache 2.6 请使用如下补丁： Squid Web Proxy Cache 2.6 Squid 11349.patch http://www.squid-cache.org/Versions/v2/2.6/changesets/11349.patch...

Squid < 2.6.STABLE12 src/client_side.c clientProcessRequest() function TRACE Request DoS

A vulnerability in TRACE request processing has been reported in Squid, which can be exploited by malicious people to cause a denial of service. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid24873; scriptversion"1.21";...

Squid < 2.6.STABLE18 Update Reply Processing DoS

Binary data 4305.prm...

Squid < 2.6 STABLE12 TRACE Request DoS

Binary data 3952.prm...

DEBIAN-CVE-2007-1560

The clientProcessRequest function in src/clientside.c in Squid 2.6 before 2.6.STABLE12 allows remote attackers to cause a denial of service daemon crash via crafted TRACE requests that trigger an assertion error...

CVE-2007-1560

The clientProcessRequest function in src/clientside.c in Squid 2.6 before 2.6.STABLE12 allows remote attackers to cause a denial of service daemon crash via crafted TRACE requests that trigger an assertion error...