CVE-2005-0626

Race condition in Squid 2.5.STABLE7 to 2.5.STABLE9, when using the Netscape Set-Cookie recommendations for handling cookies in caches, may cause Set-Cookie headers to be sent to other users, which allows attackers to steal the related cookies...

CVE-2005-0626

Race condition in Squid 2.5.STABLE7 to 2.5.STABLE9, when using the Netscape Set-Cookie recommendations for handling cookies in caches, may cause Set-Cookie headers to be sent to other users, which allows attackers to steal the related cookies...

CVE-2005-0626

Race condition in Squid 2.5.STABLE7 to 2.5.STABLE9, when using the Netscape Set-Cookie recommendations for handling cookies in caches, may cause Set-Cookie headers to be sent to other users, which allows attackers to steal the related cookies...

DEBIAN-CVE-2005-0626

Race condition in Squid 2.5.STABLE7 to 2.5.STABLE9, when using the Netscape Set-Cookie recommendations for handling cookies in caches, may cause Set-Cookie headers to be sent to other users, which allows attackers to steal the related cookies...

Squid proxy Set-Cookie header race conditions cookie leak

Race condition leads to the situation Set-Cookie header is leaked to different connection...

[SA14451] Squid Set-Cookie Header Leak Security Issue

---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...

RHEL 2.1 / 3 : squid (RHSA-2005:173)

Updated squid packages that fix a denial of service issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team Squid is a full-featured Web proxy cache. A bug was found in the way Squid handles FQDN lookups. It was possible to cra...

security flaw

Squid 2.5.STABLE8 and earlier allows remote attackers to cause a denial of service crash via certain DNS responses regarding 1 Fully Qualified Domain Names FQDN in fqdncache.c or 2 IP addresses in ipcache.c, which trigger an assertion failure...

Moderate: Red Hat Security Advisory: squid security update

Updated squid packages that fix a denial of service issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team Squid is a full-featured Web proxy cache. A bug was found in the way Squid handles FQDN lookups. It was possible to cra...

CVE-2005-0626

Race condition in Squid 2.5.STABLE7 to 2.5.STABLE9, when using the Netscape Set-Cookie recommendations for handling cookies in caches, may cause Set-Cookie headers to be sent to other users, which allows attackers to steal the related cookies...

CVE-2005-0626

CVE-2005-0626 affects Squid 2.5.STABLE7–2.5.STABLE9 in the Netscape Set-Cookie handling path. The race condition can cause Set-Cookie headers to leak to other users, enabling cookie theft. Affected: Squid proxy/cache; root cause: incorrect handling of Set-Cookie in cached responses, per multiple ...

CVE-2005-0626

Race condition in Squid 2.5.STABLE7 to 2.5.STABLE9, when using the Netscape Set-Cookie recommendations for handling cookies in caches, may cause Set-Cookie headers to be sent to other users, which allows attackers to steal the related cookies...

Mandrake Linux Security Advisory : squid (MDKSA-2005:047)

The squid developers discovered that a remote attacker could cause squid to crash via certain DNS responses. The updated packages are patched to fix the problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Mandrak...

[SECURITY] [DSA 688-1] New squid packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 688-1 [email protected] http://www.debian.org/security/ Martin Schulze February 23rd, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 688-1] New squid packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 688-1 [email protected] http://www.debian.org/security/ Martin Schulze February 23rd, 2005 http://www.debian.org/security/faq -...

SUSE-SA:2005:008: squid

The remote host is missing the patch for the advisory SUSE-SA:2005:008 squid. Squid is an Open Source web proxy. A remote attacker was potentially able to crash the Squid web proxy if the logfqdn option was set to 'on' and the DNS replies were manipulated. This is tracked by the Mitre CVE ID...

DSA-688-1 squid - mising input sanitising

Bulletin has no description...

Debian DSA-688-1 : squid - missing input sanitising

Upstream developers have discovered several problems in squid, the Internet object cache, the popular WWW proxy cache. A remote attacker can cause squid to crash via certain DNS responses. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

RHEL 4 : squid (RHSA-2005:060)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:060 advisory. Squid is a full-featured Web proxy cache. A buffer overflow flaw was found in the Gopher relay parser. This bug could allow a remote Gopher...

USN-84-1: Squid vulnerabilities

When parsing the configuration file, squid interpreted empty Access Control Lists ACLs without defined authentication schemes in a non-obvious way. This could allow remote attackers to bypass intended ACLs. CAN-2005-0194 A remote Denial of Service vulnerability was discovered in the domain name...