The vulnerability of the Squid proxy server allows attackers to bypass existing restrictions and gain access to the server.

The vulnerability of the Squid proxy server is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a malicious actor to bypass existing restrictions and gain access to the server by manipulating the CONNECT request...

CVE-2015-5400

Squid before 3.5.6 does not properly handle CONNECT method peer responses when configured with cachepeer, which allows remote attackers to bypass intended restrictions and gain access to a backend proxy via a CONNECT request...

Squid HTTP Header Injection Vulnerability

Squid Cache or Squid for short is a popular proxy server and web caching server software. A vulnerability in Squid's handling of HTTP responses with specially crafted headers allows attackers to exploit the vulnerability for HTTP response splitting attacks...

[SECURITY] Fedora 20 Update: squid-3.3.13-1.fc20

Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DN...

squid: assertion failure in Range header processing (SQUID-2014:2)

A flaw was found in the way Squid handled malformed HTTP Range headers. A remote attacker able to send HTTP requests to the Squid proxy could use this flaw to crash Squid...

Squid Web Proxy 2.2 cachemgr.cgi Unauthorized Connection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2059/info The 'cachemgr.cgi' module is a management interface for the Squid proxy service. It was installed by default in '/cgi-bin' by Red Hat Linux 5.2 and 6.0 installed with Squid. This script prompts for a host and...

National Science Foundation Squid Proxy 2.3 Internet Access Control Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10315/info Squid proxy has been reported to be affected by an Internet access control bypass vulnerability. This issue is caused by a failure of the application to properly handle access controls when evaluating malformed...

Squid Proxy 2.4/2.5 NULL URL Character Unauthorized Access Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9778/info It has been reported that Squid Proxy may be prone to an unauthorized access vulnerability that may allow remote users to bypass access controls resulting in unauthorized access to attacker-specified resources...

Squid Proxy 2.5/2.6 FTP URI Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/22079/info Squid is prone to a remote denial-of-service vulnerability because the proxy server fails to handle certain FTP requests. Successfully exploiting this issue allows remote attackers to crash affected proxy...

Squid Proxy DNS Response Spoofing (CVE-2005-1519; CVE-2007-3898)

There exists a vulnerability in Squid Web Proxy Cache in the processing of DNS lookups. The flaw is caused by predictable transaction identifiers in DNS requests generated by Squid. A remote attacker may leverage this vulnerability to use spoofed DNS responses to poison the DNS cache on the targe...

Squid HTTP Host Header Port Handling Denial of Service (CVE-2013-4123)

A denial-of-service vulnerability exists in Squid proxy...

Preemptive Protection against Squid idnsALookup DNS Name Handling Buffer Overflow (CVE-2013-4115)

A buffer overflow vulnerability exists in Squid proxy...

Squid Proxy strHdrAcptLangGetItem Value Denial of Service (CVE-2013-1839)

A denial of service vulnerability has been reported in Squid proxy server...

Squid Proxy httpMakeVaryMark Header Value Denial of Service

A denial-of-service vulnerability has been reported in Squid Proxy...

Squid Proxy Oversized Reply Header Handling - Improved Performance (CVE-2005-0241)

A denial of service vulnerability has been reported in Squid Web Proxy Cache server...

Squid Proxy Cache cachemgr.cgi Resource Exhaustion (CVE-2012-5643)

A resource exhaustion vulnerability has been reported in Squid Proxy Cache Manager. The vulnerability is due to missing input validation in the cachemgr.cgi tool. A remote, unauthenticated attacker can send specially crafted POST requests to cause cachemgr.cgi to use large amounts of memory...

SquidClamav Detection

The remote web server hosts SquidClamav, an antivirus for Squid proxy based on the ClamAV antivirus toolkit. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62029; scriptversion"1.2"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"SquidClamav Detection";...

Squid Proxy Gopher Response Processing Denial of Service (CVE-2011-3205)

A denial of service vulnerability has been reported in Squid proxy server...

Squid Proxy Invalid HTTP Request Denial of Service (CVE-2009-2621)

A denial of service vulnerability has been reported in Squid proxy server...

Squid URL Filtering Bypass

Exploit Title: Squid URL Filtering Bypass Date: 16/04/2012 Author: Gabriel Menezes Nunes Version: Squid Proxy Tested on: Squid Proxy 3.1.19 CVE: CVE-2012-2213 I found a vulnerability in Squid Proxy that allows access to filtered sites. The software believes in the Host field of HTTP Header using...