6194 matches found
squid security update
CentOS Errata and Security Advisory CESA-2005:766 An updated Squid package that fixes security issues is now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Squid is a full-featured Web proxy cache. A bug was found in the way Squid...
Important: Red Hat Security Advisory: squid security update
An updated Squid package that fixes security issues is now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Squid is a full-featured Web proxy cache. A bug was found in the way Squid displays error messages. A remote attacker could...
security flaw
Squid Web Proxy Cache 2.5 might allow remote attackers to obtain sensitive information via URLs containing invalid hostnames that cause DNS operations to fail, which results in references to previously used error messages...
security flaw
The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service segmentation fault via certain crafted requests...
USN-183-1: Squid vulnerabilities
A Denial of Service vulnerability was discovered in the handling of aborted requests. A remote attacker could exploit this to crash Squid by sending specially crafted requests. CAN-2005-2794 Alex Masterov discovered a Denial of Service vulnerability in the sslConnectTimeout function. By sending...
[SECURITY] [DSA 809-1] New squid packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 809-1 [email protected] http://www.debian.org/security/ Martin Schulze September 13th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 809-1] New squid packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 809-1 [email protected] http://www.debian.org/security/ Martin Schulze September 13th, 2005 http://www.debian.org/security/faq -...
[OpenPKG-SA-2005.021] OpenPKG Security Advisory (squid)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 OpenPKG Security Advisory The OpenPKG Project http://www.openpkg.org/security.html http://www.openpkg.org [email protected] [email protected] OpenPKG-SA-2005.021 10-Sep-2005 Package: squid Vulnerability: denial of service OpenPKG Specific...
Debian DSA-809-2 : squid - several vulnerabilities
Certain aborted requests that trigger an assertion in squid, the popular WWW proxy cache, may allow remote attackers to cause a denial of service. This update also fixes a regression caused by DSA 751. For completeness below is the original advisory text : Several vulnerabilities have been...
Squid proxy server DoS
Error in sslConnectTimeout function causes server to crash. Aborted request causes assert in proxy server...
DSA-809-1 squid - several
Bulletin has no description...
GLSA-200509-06 : Squid: Denial of Service vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200509-06 Squid: Denial of Service vulnerabilities Certain malformed requests result in a segmentation fault in the sslConnectTimeout function, handling of other certain requests trigger assertion failures. Impact : By performing...
squid -- possible denial of service condition regarding NTLM authentication
The squid patches page notes: Squid may crash with the above error FATAL: Incorrect scheme in auth header when given certain request sentences. Workaround: disable NTLM authentication...
Fedora Core 3 : squid-2.5.STABLE9-1.FC3.4 (2005-276)
Wed Mar 23 2005 Jay Fenlason 7:2.5.STABLE9-1.FC3.4 - Add more upstream patches. - add the -libbind patch, to avoid picking up a new dependency on libbind. - Remove references to /etc/squid/errors from this spec, since squid now uses datadir/squid/errors/English/ by default overridable in...
Fedora Core 2 : squid-2.5.STABLE8-1.FC2.1 (2005-153)
This update fixes CVE-2005-0446 Squid DoS from bad DNS response Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additiona...
Fedora Core 3 : squid-2.5.STABLE8-1.FC3.1 (2005-154)
This update fixes CVE-2005-0446 Squid DoS from bad DNS response Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additiona...
CVE-2005-2796
The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service segmentation fault via certain crafted requests...
DEBIAN-CVE-2005-2796
The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service segmentation fault via certain crafted requests...
