VideoCache vccleaner File Deletion

==== SYNOPSIS ===================================================== VideoCache is a Squid URL rewriter plugin written in Python for bandwidth optimization while browsing video sharing websites. Version 1.9.2 allows a user with the privileges of the Squid proxy server to append semi-arbitrary data...

VideoCache 1.9.2 - 'vccleaner' Local Privilege Escalation

==== SYNOPSIS ===================================================== VideoCache is a Squid URL rewriter plugin written in Python for bandwidth optimization while browsing video sharing websites. Version 1.9.2 allows a user with the privileges of the Squid proxy server to append semi-arbitrary data...

VideoCache 1.9.2 vccleaner root vulnerability

Exploit for unknown platform in category local exploits ============================================= VideoCache 1.9.2 vccleaner root vulnerability ============================================= Title: VideoCache 1.9.2 vccleaner root vulnerability CVE-ID: OSVDB-ID: Author: Dominick LaTrappe...

VideoCache 1.9.2 vccleaner root vulnerability

==== SYNOPSIS ===================================================== VideoCache is a Squid URL rewriter plugin written in Python for bandwidth optimization while browsing video sharing websites. Version 1.9.2 allows a user with the privileges of the Squid proxy server to append semi-arbitrary data...

Squid Proxy FTP URI Processing Denial of Service (CVE-2007-0247)

The Squid proxy server is a popular open source, Internet proxy and web caching application. It has a wide variety of uses, from speeding up a web server by caching repeated requests, to caching web, DNS and other network lookups for a group of people sharing network resources. It is primarily...

squid proxy DoS

Crash on request or response headers parsing...

Squid Proxy Invalid HTTP Response Status Code Denial of Service (CVE-2009-2621)

The Squid proxy server is a popular open source, Internet proxy and web caching application. A denial of service vulnerability has been reported in Squid proxy. The vulnerability is due to an error within the Squid proxy that fails to properly handle malformed HTTP responses. A remote attacker ca...

Squid 3.0.STABLE16 / 3.10.11

According to its banner, the version of the Squid proxy caching server installed on the remote host is older than 3.0.STABLE17 or 3.1.0.12. Such versions reportedly use incorrect bounds checking when processing some requests or responses. Squid-2.x releases are not vulnerable. C Tenable Network...

Design/Logic Flaw

Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 does not properly enforce "buffer limits and related bound checks," which allows remote attackers to cause a denial of service via 1 an incomplete request or 2 a request with a large header size, related to a HttpMsg.cc and b clientside.cc...

Squid Proxy Cache Security Update Advisory SQUID-2009:2

Squid Proxy Cache Security Update Advisory SQUID-2009:2 Advisory ID: SQUID-2009:2 Date: July 27, 2009 Summary: Multiple Remote Denial of service issues in header processing. Affected versions: Squid 3.0 - 3.0.STABLE16, Squid 3.1 - 3.1.0.11 Fixed in version: Squid 3.0.STABLE17, 3.1.0.12...

Squid多个远程拒绝服务漏洞

Bugraq ID: 35812 CNCAN ID：CNCAN-2009072805 Squid是一款功能强大的代理服务器和Web缓存服务器。 Squid存在安全问题，远程攻击者可以利用漏洞使应用程序崩溃。 -当处理特殊构建的请求或应答时不正确的缓冲区限制和相关的边界检查，可导致拒绝服务攻击。 -当处理特殊构建的应答时不正确的数据验证，可导致拒绝服务攻击。 Squid Web Proxy Cache 3.1 5 Squid Web Proxy Cache 3.1 4 Squid Web Proxy Cache 3.0 Squid Web Proxy Cache 3.1.0.11 Squi...

Proxy bypass vulnerability & plain text passwords in LevelOne AMG-2000

SEC Consult Security Advisory 20090429-0 ======================================================================= title: Proxy bypass vulnerability & plain text passwords in LevelOne AMG-2000 product: LevelOne AMG-2000 Wireless AP Management Gateway vulnerable version: Firmware =2.00.00build00600...

LevelOne AMG-2000 Wireless AP Proxy Bypass

SEC Consult Security Advisory ======================================================================= title: Proxy bypass vulnerability & plain text passwords in LevelOne AMG-2000 product: LevelOne AMG-2000 Wireless AP Management Gateway vulnerable version: Firmware =2.00.00build00600 impact:...

Mandriva Update for sarg MDVSA-2008:079 (sarg)

Check for the Version of sarg OpenVAS Vulnerability Test Mandriva Update for sarg MDVSA-2008:079 sarg Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Squid HTTP Version Number Parsing Denial of Service (CVE-2009-0478)

The Squid proxy server is a popular open source, Internet proxy and web caching application. A denial of service vulnerability has been reported in Squid proxy. The vulnerability is due to an error within the Squid proxy that fails to properly parse version numbers when processing malformed HTTP...

Squid < 2.7.STABLE6 / 3.0.STABLE13 / 3.1.0.5 HTTP Version Number Request Remote DoS

The version of the Squid proxy caching server installed on the remote host may abort when parsing requests with an invalid HTTP version. A remote attacker may be able to leverage this issue to crash the application, thereby denying service to legitimate users. Note that successful exploitation of...

Squid Proxy Cache Denial of service in request processing

Due to an internal error Squid is vulnerable to a denial of service attack when processing specially crafted requests. Determining if your version is vulnerable: All Squid-2.7 versions up to, and including 2.7.STABLE5 are vulnerable. All Squid-3.0 versions up to and including 3.0.STABLE12 are...

Preemptive Protection against Squid HTTP Version Number Parsing Denial of Service

A denial of service vulnerability was reported in the Squid proxy server. The Squid proxy server is a popular open source, Internet proxy and web caching application.The vulnerability is due to inappropriate parsing of the version number when processing malformed HTTP requests. Remote...

squid proxy server DoS

assert on invalid cache update reply...

CVE-2008-1168

Cross-site scripting XSS vulnerability in Squid Analysis Report Generator Sarg 2.2.3.1 allows remote attackers to inject arbitrary web script or HTML via the User-Agent header, which is not properly handled when displaying the Squid proxy log. NOTE: the provenance of this information is unknown;...