CVE-2007-1560

The clientProcessRequest function in src/clientside.c in Squid 2.6 before 2.6.STABLE12 allows remote attackers to cause a denial of service daemon crash via crafted TRACE requests that trigger an assertion error...

CVE-2007-1560

The clientProcessRequest function in src/clientside.c in Squid 2.6 before 2.6.STABLE12 allows remote attackers to cause a denial of service daemon crash via crafted TRACE requests that trigger an assertion error...

CVE-2007-1560

The clientProcessRequest function in src/clientside.c in Squid 2.6 before 2.6.STABLE12 allows remote attackers to cause a denial of service daemon crash via crafted TRACE requests that trigger an assertion error...

CVE-2007-1560

CVE-2007-1560 affects Squid 2.6 up to 2.6.STABLE12, where clientProcessRequest() in src/client_side.c mishandles crafted TRACE requests, triggering an assertion error and causing the daemon to crash (DoS). The issue is publicly documented with a base CVSS v2 score of 5.0 (Network attack, single-h...

CVE-2007-1560

The clientProcessRequest function in src/clientside.c in Squid 2.6 before 2.6.STABLE12 allows remote attackers to cause a denial of service daemon crash via crafted TRACE requests that trigger an assertion error...

Squid < 2.6.STABLE7 Multiple Remote DoS

Two vulnerabilities have been reported in Squid, which can be exploited by malicious people to cause a denial of service. Changes by Tenable: - added scriptname, revised description, added script dependency - added code to only run if report paranoia is "Paranoid". - fixed regex, added report...

Squid -- TRACE method handling denial of service

Squid advisory 2007:1 notes: Due to an internal error Squid-2.6 is vulnerable to a denial of service attack when processing the TRACE request method. Workarounds: To work around the problem deny access to using the TRACE method by inserting the following two lines before your first httpaccess rul...

MDKA-2006:038 : squid

This update fixes a problem in the squid package as shipped for Mandriva Linux 2007 which affects only the x8664 architecture. On that platform, squid would not start, giving the following message: FATAL: Bungled Default Configuration line 44: hostsfile This has been fixed in the updated packages...

Mandrake Linux Security Advisory : squid (MDKSA-2007:026)

A vulnerability in squid was discovered that could be remotely exploited by using a special ftp:// URL CVE-2007-0247. Another Denial of Service vulnerability was discovered in squid 2.6 that allows remote attackers to crash the server by causing an externalaclqueue overload CVE-2007-0248...

SUSE-SA:2007:012: squid

The remote host is missing the patch for the advisory SUSE-SA:2007:012 squid. This update fixes a remotely exploitable denial-of-service bug in squid that can be triggered by using special ftp:// URLs. CVE-2007-0247 Additionally the 10.2 package needed a fix for another DoS bug CVE-2007-0248 and...

GLSA-200701-22 : Squid: Multiple Denial of Service vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200701-22 Squid: Multiple Denial of Service vulnerabilities Squid fails to correctly handle ftp:// URI's. There is also an error in the externalacl queue which can cause an infinite looping condition. Impact : An attacker could...

USN-414-1: Squid vulnerabilities

David Duncan Ross Palmer and Henrik Nordstrom discovered that squid incorrectly handled special characters in FTP URLs. Remote users with access to squid could crash the server leading to a denial of service. CVE-2007-0247 Erick Dantas Rotole and Henrik Nordstrom discovered that squid could end u...

Squid: Multiple Denial of Service vulnerabilities

Background Squid is a multi-protocol proxy server. Description Squid fails to correctly handle ftp:// URI's. There is also an error in the externalacl queue which can cause an infinite looping condition. Impact An attacker could attempt to retrieve a specially crafted URI via a Squid server causi...

Squid Proxy FTP URI远程拒绝服务漏洞

Squid是一款开放源代码的代理服务器。 Squid处理FTP URI存在安全问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 构建恶意的FTP URI，在让Squid处理时，可导致代理服务器崩溃： ftp://www.example.com/sample/directory;type=d Squid Web Proxy Cache 2.6.STABLE6 Squid Web Proxy Cache 2.6.STABLE5 Squid Web Proxy Cache 2.6.STABLE4 Squid Web Proxy Cache 2.6.STABLE3 Squid Web...

Fedora Core 5 : squid-2.5.STABLE14-3.FC5 (2007-092)

Wed Jan 17 2007 Martin Stransky - 7:2.5.STABLE14-3.FC5 - added fix for 222883 - Squid crashes when receiving certain FTP listings CVE-2007-0247 - Thu Jun 8 2006 Martin Stransky - 7:2.5.STABLE14-2.FC5 - fix for squid BZ1511 - assertion failed: HttpReply.c:105: 'rep' Note that Tenable Network...

Squid代理畸形FTP URL远程拒绝服务漏洞

BUGTRAQ ID: 22079 Squid是一个高效的Web缓存及代理程序，最初是为Unix平台开发的，现在也被移植到Linux和大多数的Unix类系统中。最新的Squid可以运行在Windows平台下。 Squid在处理畸形的FTP URL时存在漏洞，如果用户通过代理访问了特制的FTP URL的话，Squid就会出现core dump，导致拒绝服务。 受影响系统： Squid Web Proxy Cache 2.6 不受影响系统： Squid Web Proxy Cache 2.6.STABLE7 厂商补丁： Squid -----...

Multiple Squid cache proxy security vulnerability

externalacl queue infinite loop, FTP client code DoS on parsing FTP server listing...

Squid < 2.6.STABLE7 Multiple Vulnerabilities

Binary data 3887.prm...

CVE-2007-0248

The aclMatchExternal function in Squid before 2.6.STABLE7 allows remote attackers to cause a denial of service crash by causing an externalacl queue overload, which triggers an infinite loop...

CVE-2007-0247

squid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of service core dump via crafted FTP directory listing responses, possibly related to the 1 ftpListingFinish and 2 ftpHtmlifyListEntry functions...