GLSA-201409-07 : c-icap: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201409-07 c-icap: Denial of Service c-icap contains a flaw in the parserequest function of request.c that may allow a remote denial of service. The issue is triggered when the buffer fails to contain a or ? symbol, which will caus...

c-icap: Denial of service

Background c-icap is an implementation of an ICAP server. It can be used with HTTP proxies that support the ICAP protocol to implement content adaptation and filtering services. Description c-icap contains a flaw in the parserequest function of request.c that may allow a remote denial of service...

ICAP Server Type and Version

This plugin attempts to determine the type and the version of the remote ICAP server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid69928; scriptversion"1.2"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"ICAP Server Type and Version"; scriptsummaryenglish:"Se...

Blue Coat ProxyAV Detection

Blue Coat ProxyAV, an anti-malware appliance, was found. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid69929; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate", value:"2020/09/14"; scriptnameenglish:"Blue Coat ProxyAV Detection";...

Blue Coat ICAP Patience Page XSS

The remote host is running a version of Blue Coat ProxySG that suffers from a XSS issue. An attacker can exploit this issue by sending a malicious link that will redirect the user to the ICAP 'Patience' page which will echo the link back, unfiltered. %NASLMINLEVEL 70300 C Tenable Network Security...

icap-info NSE Script

Tests a list of known ICAP service names and prints information about any it detects. The Internet Content Adaptation Protocol ICAP is used to extend transparent proxy servers and is generally used for content filtering and antivirus scanning. Example Usage nmap -p 1344 --script icap-info Script...

Squid代理缓存ICAP适配拒绝服务漏洞

BUGTRAQ ID: 34277 Squid是一个高效的Web缓存及代理程序，最初是为Unix平台开发的，现在也被移植到Linux和大多数的Unix类系统中，最新的Squid可以运行在Windows平台下。 Squid的ICAP实现在从ICAP服务器读取数据之前没有正确地检查body-pipes缓冲区大小。如果客户端没有从开放连接读取数据（如用户没有在IE中确认浏览器的下载消息对话框），squid就会一直从ICAP服务器将数据读取到body pipe，而已没有数据可传送给客户端。因此body pipes缓冲区会一直增加，squid可能会耗尽最多为用户下载大小的内存。 Squid Web...

squid memory exhaustion

Memory exhaustion on data received with ICAP protocol...

ICAP adaptation: missing data flow control to client side

Summary ======= squid proxys ICAP adaptation is missing data flow control to client side. Thus blocking clients may cause a denial of service condition when requesting huge downloads. Affected Versions ================= All squid 3.x versions Not vulnerable ============== None of phions HTTP prox...

CVE-2008-4485

Cross-site scripting XSS vulnerability in the ICAP patience page in Blue Coat Security Gateway OS SGOS 4.2 before 4.2.9, 5.2 before 5.2.5, and 5.3 before 5.3.1.7 allows remote attackers to inject arbitrary web script or HTML via the URL...

Cross site scripting

Cross-site scripting XSS vulnerability in the ICAP patience page in Blue Coat Security Gateway OS SGOS 4.2 before 4.2.9, 5.2 before 5.2.5, and 5.3 before 5.3.1.7 allows remote attackers to inject arbitrary web script or HTML via the URL...

CVE-2008-4485

CVE-2008-4485: XSS in the ICAP Patience page of Blue Coat SGOS. Affects SGOS 4.2 before 4.2.9, 5.2 before 5.2.5, and 5.3 before 5.3.1.7; remote attackers can inject arbitrary script via the URL. Connected sources confirm the issue; no patch/mitigation details are provided in the documents.

CVE-2008-0309

Stack-based buffer overflow in Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a malformed RAR file to...

Code injection

Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to cause a denial of service memory consumption via a malformed RAR file to the Internet Content Adaptation Protocol ICAP port...

CVE-2008-0308

CVE-2008-0308 affects Symantec Decomposer used in Symantec Scan Engine 5.1.2 and earlier versions up to 5.1.6.31. A specially crafted RAR file sent to ICAP port 1344 can cause memory exhaustion leading to DoS; some sources also mention possible arbitrary code execution under user privileges. Reme...

CVE-2008-0308

Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to cause a denial of service memory consumption via a malformed RAR file to the Internet Content Adaptation Protocol ICAP port...

CVE-2008-0309

Stack-based buffer overflow in Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a malformed RAR file to...

squids ICAP implementation lacks a defer check when reading from ICAP server

squids ICAP implementation does not check mem-store size before reading from an ICAP-server. If the user does not confirm browsers download-message-box, squid keeps on reading data from the ICAP server into the memory store, whilst no more data can be delivered to the client. Thus the memory stor...