Squid: Denial of Service through DNS responses

Background Squid is a full-featured Web proxy cache designed to run on Unix-like systems. It supports proxying and caching of HTTP, FTP, and other protocols, as well as SSL support, cache hierarchies, transparent caching, access control lists and many other features. Description Handling of certa...

GLSA-200502-25 : Squid: Denial of Service through DNS responses

The remote host is affected by the vulnerability described in GLSA-200502-25 Squid: Denial of Service through DNS responses Handling of certain DNS responses trigger assertion failures. Impact : By returning a specially crafted DNS response an attacker could cause Squid to crash by triggering an...

security flaw

Buffer overflow in the gopherToHTML function in the Gopher reply parser for Squid 2.5.STABLE7 and earlier allows remote malicious Gopher servers to cause a denial of service crash via crafted responses...

CVE-2004-1485

Buffer overflow in the TFTP client in InetUtils 1.4.2 allows remote malicious DNS servers to execute arbitrary code via a large DNS response that is handled by the gethostbyname function...

Important: Red Hat Security Advisory: squid security update

An updated Squid package that fixes several security issues is now available. Squid is a full-featured Web proxy cache. A buffer overflow flaw was found in the Gopher relay parser. This bug could allow a remote Gopher server to crash the Squid proxy that reads data from it. Although Gopher server...

[SA14094] newsfetch NNTP Response Handling Buffer Overflows

TITLE: newsfetch NNTP Response Handling Buffer Overflows SECUNIA ADVISORY ID: SA14094 VERIFY ADVISORY: http://secunia.com/advisories/14094/ CRITICAL: Less critical IMPACT: System access WHERE: From remote SOFTWARE: newsfetch 1.x http://secunia.com/product/4591/ DESCRIPTION: Niels Heinen has...

Newspost 2.02.1 - Remote Buffer Overflow

Newspost 2.02.1 - Remote Buffer Overflow source: https://www.securityfocus.com/bid/12418/info Newspost is prone to a remote buffer overflow vulnerability due to an unbounded memory copy operation. The problem occurs in the 'socketgetline' function of 'socket.c' when the vulnerable client handles...

Newspost 2.0/2.1 - Remote Buffer Overflow

source: https://www.securityfocus.com/bid/12418/info Newspost is prone to a remote buffer overflow vulnerability due to an unbounded memory copy operation. The problem occurs in the 'socketgetline' function of 'socket.c' when the vulnerable client handles NNTP server responses. Successful...

squid -- possible cache-poisoning via malformed HTTP responses

The squid patches page notes: This patch makes Squid considerably stricter while parsing the HTTP protocol. A Content-length header should only appear once in a valid request or response. Multiple Content-length headers, in conjunction with specially crafted requests, may allow Squid's cache to b...

squid -- denial-of-service vulnerabilities

The Squid team reported several denial-of-service vulnerabilities related to the handling of DNS responses and NT Lan Manager messages. These may allow an attacker to crash the Squid cache...

DEBIAN-CVE-2005-0094

Buffer overflow in the gopherToHTML function in the Gopher reply parser for Squid 2.5.STABLE7 and earlier allows remote malicious Gopher servers to cause a denial of service crash via crafted responses...

CVE-2004-1303

Buffer overflow in the get function in get.c for Yanf 0.4 allows remote malicious web servers to execute arbitrary code via crafted HTTP responses...

CVE-2004-1485

Buffer overflow in the TFTP client in InetUtils 1.4.2 allows remote malicious DNS servers to execute arbitrary code via a large DNS response that is handled by the gethostbyname function...

Microsoft Windows SMTP component vulnerable to remote code execution

Overview A vulnerability in the mail handling service in some versions of Microsoft Windows could allow a remote attacker to compromise the affected system. Description The Simple Mail Transfer Protocol SMTP is the most common protocol for the delivery of electronic mail between systems on the...

CVE-2002-1364

Buffer overflow in the getorigin function in traceroute-nanog allows attackers to execute arbitrary code via long WHOIS responses...

CVE-2002-1364

CVE-2002-1364 describes a buffer overflow in traceroute-nanog’s get_origin() function triggered by long WHOIS responses. This leads to arbitrary code execution and potential privilege escalation on affected systems. Public advisories (Debian DSA-254-1) note the issue was fixed in traceroute-nanog...

DEBIAN-CVE-2004-0433

Multiple buffer overflows in the Real-Time Streaming Protocol RTSP client for 1 MPlayer before 1.0pre4 and 2 xine lib xine-lib before 1-rc4, when playing Real RTSP realrtsp streams, allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long URLs, b lo...

RHEL 2.1 : glibc (RHSA-2004:383)

Updated glibc packages that fix a security flaw in the resolver as well as dlclose handling are now available. The GNU libc packages known as glibc contain the standard C libraries used by applications. A security audit of the glibc packages in Red Hat Enterprise Linux 2.1 found a flaw in the...

Multiple Cisco ONS control cards fail to properly handle invalid TCP responses

Overview A vulnerability exists in multiple control cards used by Cisco ONS devices. This vulnerability could allow a remote attacker to cause a denial-of-service condition. Description Cisco's Optical Networking product line consists of a series of devices designed to offer high-bandwidth data...

Colin McRae Rally 2004 - Multiplayer Denial of Service

Colin McRae Rally 2004 - Multiplayer Denial of Service source: https://www.securityfocus.com/bid/10464/info It is reported that Colin McRae Rally 2004 has a flaw handling server responses when entering the multiplayer menu of the game. When entering the multiplayer menu, the game client sends a...