Gentoo Security Advisory GLSA 200809-11 (havp)

The remote host is missing updates announced in advisory GLSA 200809-11. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200809-11 (havp)

The remote host is missing updates announced in advisory GLSA 200809-11. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

GLSA-200809-11 : HAVP: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200809-11 HAVP: Denial of Service Peter Warasin reported an infinite loop in sockethandler.cpp when connecting to a non-responsive HTTP server. Impact : A remote attacker could send requests to unavailable servers, resulting in a...

HAVP: Denial of service

Background HAVP is a HTTP AntiVirus Proxy. Description Peter Warasin reported an infinite loop in sockethandler.cpp when connecting to a non-responsive HTTP server. Impact A remote attacker could send requests to unavailable servers, resulting in a Denial of Service. Workaround There is no known...

HAVP sockethandler.cpp客户端连接拒绝服务漏洞

BUGTRAQ ID: 30697 CVECAN ID: CVE-2008-3688 HAVP（HTTP Antivirus Proxy）是ClamAV杀毒扫描器的代理。 HAVP的sockethandler.cpp文件没有正确地处理客户端请求，如果客户端通过squid三明治模式的HAVP连接到没有响应的服务器的话，HAVP就会一直读取没有响应的服务器直到RECVTIMEOUT，通常为2分钟。之后HAVP会重新尝试一个循环，而由于未初始化的变量，这个循环为死循环。 仅在使用父代理且父代理为不需解析的数字IP地址时才会出现这个漏洞。 Christian Hilgers HAVP 0.88...

CVE-2008-3688

HAVP (HTTP Antivirus Proxy) 0.88 is vulnerable to a denial-of-service through an infinite loop in sockethandler.cpp when connecting to a non-responsive upstream server, caused by an uninitialized variable. Exploitation would allow remote attackers to tie up the proxy, potentially affecting availa...

CVE-2005-0668

Unknown vulnerability in HTTP Anti Virus Proxy HAVP before 0.51 prevents viruses from being properly detected in certain files such as 1 .CAB or 2 .ZIP files...

CVE-2005-0668

The CVE-2005-0668 entry describes an issue in HTTP Anti Virus Proxy (HAVP) prior to version 0.51 where viruses are not properly detected in certain archive files (notably CAB and ZIP). Affected component: HAVP (HTTP proxy). Root cause: scanning failure for specific archive formats, enabling poten...