274 matches found
CVE-2002-0714
FTP proxy in Squid before 2.4.STABLE6 does not compare the IP addresses of control and data connections with the FTP server, which allows remote attackers to bypass firewall rules or spoof FTP server responses...
CVE-2002-0538
FTP proxy in Symantec Raptor Firewall 6.5.3 and Enterprise 7.0 rewrites an FTP server's "FTP PORT" responses in a way that allows remote attackers to redirect FTP data connections to arbitrary ports, a variant of the "FTP bounce" vulnerability...
Compaq Web-enabled Management Software HTTP Server Arbitrary Traffic Proxy
The remote Compaq Web Management Agent install can be used as an HTTP proxy. An attacker can use this to bypass firewall rules or hide the source of web-based attacks. Written by H D Moore Changes by Tenable: - Revised plugin title, changed family 1/21/2009 include"compat.inc"; ifdescription...
VirusWall HTTP proxy content scanning circumvention
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 FOR PUBLIC RELEASE - ------------------------------------------------------------------------ Inside Security GmbH Vulnerability Notification Revision 0.3 2002-03-10 - ------------------------------------------------------------------------ The latest...
CheckPoint FW1 HTTP Security Hole
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Greetings! A quite known proxy vulnerability was found for FW1 V4.1 SP5 plus hotfixes - thanks to Ryan Snyder for announcing the first bits on Firewall-1 mailing list. If you connect to a server you are allowed to connect to via HTTP proxy e.g. a comm...
SapporoWorks Black JumboDog 2.6.42.6.5 - HTTP Proxy Buffer Overflow
SapporoWorks Black JumboDog 2.6.42.6.5 - HTTP Proxy Buffer Overflow // source: https://www.securityfocus.com/bid/3858/info Black JumboDog 2.6.4 and 2.6.5 HTTP proxy is vulnerable to an exploitable buffer overflow. The buffer overflow can be exploited by sending excessively long "expires",...
Vulnerability in Viralator proxy extension
Hi! Date: October 2001 Product: Viralator http://viralator.loddington.com/ Viralator is a perl-script to be used with the squid proxy, an apache webserver and some virus scanner software. Its purpose is to allow scanning of files downloaded through the proxy for viruses. The product has been list...
Squid mkdir-only PUT Request Remote DoS
A problem exists in the way the remote Squid proxy server handles a special 'mkdir-only' PUT request, and causes denial of service to the proxy server. An attacker may use this flaw to prevent your LAN users from accessing the web. %NASLMINLEVEL 70300 This script was written by Adam Baldwin See t...
ISA.dos.txt
FSC Internet Corp. / SecureXpert Labs Advisory SX-20010320-2 Denial of Service in Microsoft ISA server v1.0 Summary Microsoft ISA Server 1.0 on Windows 2000 Server SP1 is vulnerable to a simple network-based attack which stops all incoming and outgoing web traffic from passing through the firewal...
CVE-1999-0992
HP VirtualVault with the PHSS17692 patch allows unprivileged processes to bypass access restrictions via the Trusted Gateway Proxy TGP...
csmproxy.txt
Date: Thu, 16 Jul 1998 15:22:24 -0400 From: Security Research Team Subject: S.A.F.E.R. Security Bulletin 980708.DOS.1.1 S.A.F.E.R. Security Bulletin 980708.DOS.1.1 TITLE : Vulnerability with CSM Proxy 4.1 DATE : July 8, 1998 NATURE : Denial-of-Service PLATFORMS : Windows NT, Windows 95/98 DETAILS...
ms-proxy2.0-attack.txt
MSProxy 2.0 can be used to attack hosts on internal network Microsoft's Proxy server 2.0 can be used as a "gateway" to attack local networks from the outside, bypassing the proxy, even if IP forwarding is not enabled. MS Proxy has a bug that causes information whose origin is from an outside...
HTTP Proxy Arbitrary Site/Port Relaying
The remote proxy, allows everyone to perform requests against arbitrary ports, such as : 'GET http://cvs.nessus.org:110'. This problem may allow attackers to go through your firewall, by connecting to sensitive ports like 25 sendmail using the proxy. In addition to that, it might be used to perfo...