29 matches found
Debian DSA-576-1 : squid - several vulnerabilities
Several security vulnerabilities have been discovered in Squid, the internet object cache, the popular WWW proxy cache. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-1999-0710 It is possible to bypass access lists and scan arbitrary hosts and ports in...
DSA-576-1 squid - multiple
Bulletin has no description...
CVE-2004-0918
The asnparseheader function asn1.c in the SNMP module for Squid Web Proxy Cache before 2.4.STABLE7 allows remote attackers to cause a denial of service server restart via certain SNMP packets with negative length fields that trigger a memory allocation error...
RHEL 2.1 / 3 : squid (RHSA-2004:591)
An updated squid package that fixes a remote denial of service vulnerability is now available. Squid is a full-featured Web proxy cache. iDEFENSE reported a flaw in the squid SNMP module. This flaw could allow an attacker who has the ability to send arbitrary packets to the SNMP port to restart t...
Important: Red Hat Security Advisory: squid security update
An updated squid package that fixes a remote denial of service vulnerability is now avaliable. Squid is a full-featured Web proxy cache. iDEFENSE reported a flaw in the squid SNMP module. This flaw could allow an attacker who has the ability to send arbitrary packets to the SNMP port to restart t...
GLSA-200410-15 : Squid: Remote DoS vulnerability
The remote host is affected by the vulnerability described in GLSA-200410-15 Squid: Remote DoS vulnerability A parsing error exists in the SNMP module of Squid where a specially crafted UDP packet can potentially cause the server to restart, closing all current connections. This vulnerability onl...
FreeBSD : squid -- SNMP module denial-of-service vulnerability (184)
The following package needs to be updated: squid %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg65e99f521c5f11d9bc4a000c41e2cdad.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-20...
Squid SNMP Module asn_parse_header() Function Remote DoS
The remote Squid caching proxy, according to its version number, may be vulnerable to a remote denial of service attack. This flaw is caused due to an input validation error in the SNMP module, and exploitation requires that Squid not only was built to support it but also configured to use it. An...
squid -- SNMP module denial-of-service vulnerability
The Squid-2.5 patches page notes: If a certain malformed SNMP request is received squid restarts with a Segmentation Fault error. This only affects squid installations where SNMP is explicitly enabled via "make config". As a workaround, SNMP can be disabled by defining "snmpport 0" in squid.conf...