Debian DSA-828-1 : squid - authentication handling

Upstream developers of squid, the popular WWW proxy cache, have discovered that changes in the authentication scheme are not handled properly when given certain request sequences while NTLM authentication is in place, which may cause the daemon to restart. %NASLMINLEVEL 70300 C Tenable Network...

Mandrake Linux Security Advisory : squid (MDKSA-2005:162)

Two vulnerabilities were recently discovered in squid : The first is a DoS possible via certain aborted requests that trigger an assertion error related to 'STOPPENDING' CVE-2005-2794. The second is a DoS caused by certain crafted requests and SSL timeouts CVE-2005-2796. The updated packages have...

USN-192-1: Squid vulnerability

Mike Diggins discovered a remote Denial of Service vulnerability in Squid. Sending specially crafted NTML authentication requests to Squid caused the server to crash...

DEBIAN-CVE-2005-2917

Squid 2.5.STABLE10 and earlier, while performing NTLM authentication, does not properly handle certain request sequences, which allows attackers to cause a denial of service daemon restart...

CVE-2005-2917

Squid 2.5.STABLE10 and earlier, while performing NTLM authentication, does not properly handle certain request sequences, which allows attackers to cause a denial of service daemon restart...

CVE-2005-2917

Squid 2.5.STABLE10 and earlier, while performing NTLM authentication, does not properly handle certain request sequences, which allows attackers to cause a denial of service daemon restart...

CVE-2005-2917

Squid 2.5.STABLE10 and earlier, while performing NTLM authentication, does not properly handle certain request sequences, which allows attackers to cause a denial of service daemon restart...

[SECURITY] [DSA 809-2] New squid packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 809-2 [email protected] http://www.debian.org/security/ Martin Schulze September 30th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 809-2] New squid packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 809-2 [email protected] http://www.debian.org/security/ Martin Schulze September 30th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 828-1] New squid packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 828-1 [email protected] http://www.debian.org/security/ Martin Schulze September 30th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 828-1] New squid packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 828-1 [email protected] http://www.debian.org/security/ Martin Schulze September 30th, 2005 http://www.debian.org/security/faq -...

CVE-2005-2917

The CVE-2005-2917 issue affects the Squid proxy server (2.5.STABLE10 and earlier) during NTLM authentication, where certain crafted request sequences can crash the daemon. Impact described in multiple advisories: a remote attacker could terminate the Squid process, causing a denial of service wit...

CVE-2005-2917

Squid 2.5.STABLE10 and earlier, while performing NTLM authentication, does not properly handle certain request sequences, which allows attackers to cause a denial of service daemon restart...

CVE-2005-2917

Squid 2.5.STABLE10 and earlier, while performing NTLM authentication, does not properly handle certain request sequences, which allows attackers to cause a denial of service daemon restart...

Squid < 2.5.STABLE11 NTLM Authentication Header DoS

Binary data 3247.prm...

DSA-828-1 squid - several

Bulletin has no description...

RHEL 4 : squid (RHSA-2005:766)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:766 advisory. Squid is a full-featured Web proxy cache. A bug was found in the way Squid displays error messages. A remote attacker could submit a request...

Fedora Core 3 : squid-2.5.STABLE9-1.FC3.7 (2005-852)

Tue Sep 6 2005 Martin Stransky 7:2.5.STABLE9-1.FC3.7 - Three upstream patches for 167414 - Spanish and Greek messages - patch for -DFORTIFYSOURCE=2 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora Core 4 : squid-2.5.STABLE9-8 (2005-851)

Tue Sep 6 2005 Martin Stransky 7:2.5.STABLE9-8 - Three upstream patches for 167414 - Spanish and Greek messages - patch for -DFORTIFYSOURCE=2 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

squid security update

CentOS Errata and Security Advisory CESA-2005:766-01 An updated Squid package that fixes security issues is now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Squid is a full-featured Web proxy cache. A bug was found in the way Squ...