463 matches found
Squid Proxy 'Host' HTTP标头安全限制绕过漏洞
BUGTRAQ ID: 53024 Squid是一个高效的Web缓存及代理程序，最初是为Unix平台开发的，现在也被移植到Linux和大多数的Unix类系统中，最新的Squid可以运行在Windows平台下。 Squid Proxy在过滤规则的实现上存在安全漏洞，成功攻击可允许攻击者绕过某些安全限制。 0 Squid Web Proxy Cache 3.1.19 厂商补丁： Squid ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.squid-cache.org import...
Squid Proxy Port Scanner
A exposed Squid proxy will usually allow an attacker to make requests on their behalf. If misconfigured, this may give the attacker information about devices that they cannot normally reach. For example, an attacker may be able to make requests for internal IP addresses against an open Squid prox...
squid proxy server buffer overflow
Crash on DNS response parsing...
Squid Proxy Gopher Response Processing Buffer Overflow (CVE-2011-3205)
A denial of service vulnerability has been reported in Squid proxy server. The vulnerability is due to a boundary error while parsing malformed Gopher responses. A remote attacker could exploit this vulnerability by setting up a Gopher server to send malicious responses. Successful exploitation...
Squid Proxy Caching Server CNAME Denial of Service Vulnerability
Squid proxy caching server is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause an affected application to crash, denying service to legitimate users. OpenVAS Vulnerability Test $Id: gbsquid50449.nasl 3386 2016-05-25 19:06:55Z jan $ Squid Proxy Caching Server...
[SECURITY] Fedora 16 Update: squid-3.2.0.11-1.fc16
Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DN...
Squid Proxy Gopher Remote Buffer Overflow Vulnerability
Squid Proxy is prone remote buffer-overflow vulnerability affects the Gopher-to-HTML functionality. An attacker can exploit this issue to execute arbitrary code with the privileges of the vulnerable application. Failed exploit attempts will result in a denial-of-service condition. OpenVAS...
Squid 3.1.6 DNS Replay Denial of Service
Binary data 801040.prm...
Squid Proxy String Processing NULL Pointer Dereference
The Squid proxy server is a popular open source, Internet proxy and web caching application. It supports various network protocols such as HTTP, FTP, SSL, DNS, and HTCP. It is primarily designed to run on Unix-like systems. A Denial of Service vulnerability exists in Squid Proxy Cache component...
Squid 3.1.6 DNS Reply Denial of Service
According to its banner, the version of the Squid proxy caching server installed on the remote host is 3.1.6. This version is affected by a denial of service vulnerability that is caused by an assertion failure when contacting IPv4-only DNS resolvers. Note that Nessus has relied only on the versi...
Squid Proxy Cache Update Denial of Service
There exists a denial of service vulnerability in Squid web proxy application. The flaw is due to incorrect bounds checking when processing crafted cache update reply messages. A remote unauthenticated attacker may trigger this vulnerability to terminate the affected service. Upon receiving a...
Squid Proxy HTCP Packet Processing Denial of Service (CVE-2010-0639)
The Squid proxy server is a popular open source, Internet proxy and web caching application. It supports various network protocols such as HTTP, FTP, SSL, DNS, and HTCP. A denial of service vulnerability has been reported in Squid Proxy. The vulnerability is due to a NULL pointer dereference when...
[SECURITY] Fedora 11 Update: squid-3.0.STABLE24-1.fc11
Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DN...
[SECURITY] Fedora 13 Update: squid-3.1.0.16-7.fc13
Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DN...
squid proxy server DoS
Crash on HTCP packets processing...
Squid < 3.0.STABLE19 / 3.1.0.14 / 2.6.STABLE23 strListGetItem Function Remote DoS
According to its banner, the version of the Squid proxy caching server installed on the remote host is older than 3.0.STABLE19 / 3.1.0.14 / 2.6.STABLE23. A bug in the 'strListGetItem' function in 'src/HttpHeaderTools.c' can result in an infinite loop when processing a specially crafted auth heade...
squid proxy server DoS
Crash on authentication, crash on DNS reply parsing...
Squid < 3.0.STABLE23 / 3.1.0.16
According to its banner, the version of the Squid proxy caching server installed on the remote host is 2.x or older than 3.0.STABLE23 / 3.1.0.16. Such versions reportedly fail to correctly validate DNS packets, which can be abused by a remote attack to cause a short-term denial of service. Note...
CVE-2008-7250
Cross-site scripting XSS vulnerability in Squid Analysis Report Generator Sarg 2.2.4 allows remote attackers to inject arbitrary web script or HTML via a JavaScript onload event in the User-Agent header, which is not properly handled when displaying the Squid proxy log. NOTE: this issue exists...
