Squid多个远程拒绝服务漏洞

Bugraq ID: 35812 CNCAN ID：CNCAN-2009072805 Squid是一款功能强大的代理服务器和Web缓存服务器。 Squid存在安全问题，远程攻击者可以利用漏洞使应用程序崩溃。 -当处理特殊构建的请求或应答时不正确的缓冲区限制和相关的边界检查，可导致拒绝服务攻击。 -当处理特殊构建的应答时不正确的数据验证，可导致拒绝服务攻击。 Squid Web Proxy Cache 3.1 5 Squid Web Proxy Cache 3.1 4 Squid Web Proxy Cache 3.0 Squid Web Proxy Cache 3.1.0.11 Squi...

Proxy bypass vulnerability & plain text passwords in LevelOne AMG-2000

SEC Consult Security Advisory 20090429-0 ======================================================================= title: Proxy bypass vulnerability & plain text passwords in LevelOne AMG-2000 product: LevelOne AMG-2000 Wireless AP Management Gateway vulnerable version: Firmware =2.00.00build00600...

LevelOne AMG-2000 Wireless AP Proxy Bypass

SEC Consult Security Advisory ======================================================================= title: Proxy bypass vulnerability & plain text passwords in LevelOne AMG-2000 product: LevelOne AMG-2000 Wireless AP Management Gateway vulnerable version: Firmware =2.00.00build00600 impact:...

Mandriva Update for sarg MDVSA-2008:079 (sarg)

Check for the Version of sarg OpenVAS Vulnerability Test Mandriva Update for sarg MDVSA-2008:079 sarg Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Squid HTTP Version Number Parsing Denial of Service (CVE-2009-0478)

The Squid proxy server is a popular open source, Internet proxy and web caching application. A denial of service vulnerability has been reported in Squid proxy. The vulnerability is due to an error within the Squid proxy that fails to properly parse version numbers when processing malformed HTTP...

Squid < 2.7.STABLE6 / 3.0.STABLE13 / 3.1.0.5 HTTP Version Number Request Remote DoS

The version of the Squid proxy caching server installed on the remote host may abort when parsing requests with an invalid HTTP version. A remote attacker may be able to leverage this issue to crash the application, thereby denying service to legitimate users. Note that successful exploitation of...

Squid Proxy Cache Denial of service in request processing

Due to an internal error Squid is vulnerable to a denial of service attack when processing specially crafted requests. Determining if your version is vulnerable: All Squid-2.7 versions up to, and including 2.7.STABLE5 are vulnerable. All Squid-3.0 versions up to and including 3.0.STABLE12 are...

Preemptive Protection against Squid HTTP Version Number Parsing Denial of Service

A denial of service vulnerability was reported in the Squid proxy server. The Squid proxy server is a popular open source, Internet proxy and web caching application.The vulnerability is due to inappropriate parsing of the version number when processing malformed HTTP requests. Remote...

squid proxy server DoS

assert on invalid cache update reply...

CVE-2008-1168

Cross-site scripting XSS vulnerability in Squid Analysis Report Generator Sarg 2.2.3.1 allows remote attackers to inject arbitrary web script or HTML via the User-Agent header, which is not properly handled when displaying the Squid proxy log. NOTE: the provenance of this information is unknown;...

CVE-2008-1167

Stack-based buffer overflow in the useragent function in useragent.c in Squid Analysis Report Generator Sarg 2.2.3.1 allows remote attackers to execute arbitrary code via a long Squid proxy server User-Agent header. NOTE: some of these details are obtained from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in Squid Analysis Report Generator Sarg 2.2.3.1 allows remote attackers to inject arbitrary web script or HTML via the User-Agent header, which is not properly handled when displaying the Squid proxy log. NOTE: the provenance of this information is unknown;...

CVE-2008-1168

Cross-site scripting XSS vulnerability in Squid Analysis Report Generator Sarg 2.2.3.1 allows remote attackers to inject arbitrary web script or HTML via the User-Agent header, which is not properly handled when displaying the Squid proxy log. NOTE: the provenance of this information is unknown;...

CVE-2008-1167

CVE-2008-1167: Stack-based buffer overflow in Squid Analysis Report Generator (Sarg) 2.2.3.1, in the useragent function (useragent.c). Remote attackers can execute arbitrary code via a long Squid proxy server User-Agent header. NOTE: some details are from third party information. The provided doc...

CVE-2008-1167

Stack-based buffer overflow in the useragent function in useragent.c in Squid Analysis Report Generator Sarg 2.2.3.1 allows remote attackers to execute arbitrary code via a long Squid proxy server User-Agent header. NOTE: some of these details are obtained from third party information...

Squid Proxy缓存更新回复处理远程拒绝服务漏洞

Squid Proxy是一款开放源代码的流行的代理服务程序。 Squid Proxy在处理部分缓存更新回复处理时缺少正确的边界检查，远程攻击者可以利用漏洞对Squid服务进行拒绝服务攻击。 目前没有详细漏洞细节提供。 Squid Web Proxy Cache 3.0 PRE3 Squid Web Proxy Cache 3.0 PRE2 Squid Web Proxy Cache 3.0 PRE1 Squid Web Proxy Cache 3.0 Squid Web Proxy Cache 2.5 .STABLE9 + Debian Linux 3.1 sparc + Debian...

Squid Proxy TRACE Request Remote Denial of Service (CVE-2007-1560)

The Squid proxy server is a popular open source, Internet proxy and web caching application. A remote attacker can exploit this flaw by specially crafting a TRACE request and sending it to a vulnerable system. Successful exploitation may allow an attacker to create a denial of service condition o...

Squid Proxy TRACE请求远程拒绝服务漏洞

Squid Proxy是一款开放源始码的代理服务程序。 Squid Proxy处理TRACE请求方式存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 此问题允许任意可信的客户端使用这个服务进行拒绝服务攻击，目前没有详细漏洞细节提供。 Squid Web Proxy Cache 2.6 请使用如下补丁： Squid Web Proxy Cache 2.6 Squid 11349.patch http://www.squid-cache.org/Versions/v2/2.6/changesets/11349.patch...

Squid Proxy 2.52.6 - FTP URI Remote Denial of Service

Squid Proxy 2.52.6 - FTP URI Remote Denial of Service source: https://www.securityfocus.com/bid/22079/info Squid is prone to a remote denial-of-service vulnerability because the proxy server fails to handle certain FTP requests. Successfully exploiting this issue allows remote attackers to crash...

Squid Proxy 2.5/2.6 - FTP URI Remote Denial of Service

source: https://www.securityfocus.com/bid/22079/info Squid is prone to a remote denial-of-service vulnerability because the proxy server fails to handle certain FTP requests. Successfully exploiting this issue allows remote attackers to crash affected proxy applications, denying futher service to...