463 matches found
squid proxy server access control lists protection bypass
If LDAP authentication is used space can be added to username to bypass ACL restrictuions...
Squid < 2.5.STABLE7 Report Information Disclosure
Binary data 2491.prm...
Squid SNMP Module asn_parse_header() Function Remote DoS
The remote Squid caching proxy, according to its version number, may be vulnerable to a remote denial of service attack. This flaw is caused due to an input validation error in the SNMP module, and exploitation requires that Squid not only was built to support it but also configured to use it. An...
Mandrake Linux Security Advisory : squid (MDKSA-2002:016-1)
Three security issues were found in the 2.x versions of the Squid proxy server up to and including 2.4.STABLE3. The first is a memory leak in the optional SNMP interface to Squid which could allow a malicious user who can send packets to the Squid SNMP port to possibly perform a Denial of Service...
Mandrake Linux Security Advisory : squid (MDKSA-2001:066)
The Squid proxy server has a serious security flaw in versions 2.3.STABLE2 through 2.3.STABLE4. This problem surfaces when Squid is used in httpdaccel mode. If you configure httpaccelwithproxy off then any request to Squid is allowed. Malicious users may use your proxy to portscan remote systems,...
National Science Foundation Squid Proxy 2.3 - Internet Access Control Bypass
National Science Foundation Squid Proxy 2.3 - Internet Access Control Bypass source: https://www.securityfocus.com/bid/10315/info Squid proxy has been reported to be affected by an Internet access control bypass vulnerability. This issue is caused by a failure of the application to properly handl...
National Science Foundation Squid Proxy 2.3 - Internet Access Control Bypass
source: https://www.securityfocus.com/bid/10315/info Squid proxy has been reported to be affected by an Internet access control bypass vulnerability. This issue is caused by a failure of the application to properly handle access controls when evaluating malformed URI requests. This issue is...
Squid %xx URL Encoding ACL Bypass
The remote squid caching proxy, according to its version number, is vulnerable to a flaw that could allow an attacker to gain access to unauthorized resources. The flaw itself consists of sending a malformed username containing the %00 null character, which could allow an attacker to access...
Squid Proxy 2.42.5 - NULL URL Character Unauthorized Access
Squid Proxy 2.42.5 - NULL URL Character Unauthorized Access source: https://www.securityfocus.com/bid/9778/info It has been reported that Squid Proxy may be prone to an unauthorized access vulnerability that may allow remote users to bypass access controls resulting in unauthorized access to...
Squid Proxy 2.4/2.5 - NULL URL Character Unauthorized Access
source: https://www.securityfocus.com/bid/9778/info It has been reported that Squid Proxy may be prone to an unauthorized access vulnerability that may allow remote users to bypass access controls resulting in unauthorized access to attacker-specified resources. The vulnerability presents itself...
CVE-2002-2414
Opera 6.0.3, when using Squid 2.4 for HTTPS proxying, does not properly handle when accepting a non-global certificate authority CA certificate from a site and establishing a subsequent HTTPS connection, which allows remote attackers to cause a denial of service crash...
DEBIAN-CVE-2002-0714
FTP proxy in Squid before 2.4.STABLE6 does not compare the IP addresses of control and data connections with the FTP server, which allows remote attackers to bypass firewall rules or spoof FTP server responses...
CVE-2002-0715
Vulnerability in Squid before 2.4.STABLE6 related to proxy authentication credentials may allow remote web sites to obtain the user's proxy login and password...
updated squid advisory
Apologies - it should be stable6, not stable5. Here's the updated one: Squid Proxy Cache Security Update Advisory SQUID-2002:2 Advisory ID: SQUID-2002:2 Date: March 26, 2002 Affected versions: Squid-2.x up to and including 2.4.STABLE4 Reported by: zen-parse [email protected]...
CVE-2001-0843
Squid proxy server 2.4 and earlier allows remote attackers to cause a denial of service crash via a mkdir-only FTP PUT request...
Squid Proxy Server contains buffer overflow in parsing of the authentication portion of FTP URLs
Overview There is a remotely exploitable buffer overflow in the Squid proxy/cache server. Exploitation of this vulnerability could lead to an intruder gaining a shell on the target Squid server. Description Squid versions 2.3 and 2.4 are vulnerable to a buffer overflow in the code that parses FTP...
Squid 2.0-4 - Cache FTP Proxy URL Buffer Overflow
Squid 2.0-4 - Cache FTP Proxy URL Buffer Overflow // source: https://www.securityfocus.com/bid/4148/info A buffer overflow exists in the Squid proxy server's FTP URL handling. If a user has the ability to use the Squid process to proxy FTP requests, it may be possible for the user make a maliciou...
Squid HTTP Proxy Security Update Advisory 2002:1
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Squid Proxy Cache Security Update Advisory SQUID-2002:1 Advisory ID: SQUID-2002:1 Date: February 21, 2002 Affected versions: Squid-2.x up to and including 2.4.STABLE3 http://www.squid-cache.org/Advisories/SQUID-20021.txt Problem Description: Three...
Squid 2.0-4 - Cache FTP Proxy URL Buffer Overflow
// source: https://www.securityfocus.com/bid/4148/info A buffer overflow exists in the Squid proxy server's FTP URL handling. If a user has the ability to use the Squid process to proxy FTP requests, it may be possible for the user make a malicious request. By sending a custom-crafted ftp:// URL...