[SA13825] Squid Two Vulnerabilities

TITLE: Squid Two Vulnerabilities SECUNIA ADVISORY ID: SA13825 VERIFY ADVISORY: http://secunia.com/advisories/13825/ CRITICAL: Moderately critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: Squid 2.x http://secunia.com/product/310/ DESCRIPTION: Two vulnerabilities have been reported i...

squid -- denial of service with forged WCCP messages

The squid patches page notes: WCCPISEEYOU messages contain a 'number of caches' field which should be between 1 and 32. Values outside that range may crash Squid if WCCP is enabled, and if an attacker can spoof UDP packets with the WCCP router's IP address...

USN-19-1: squid vulnerabilities

Recently, two Denial of Service vulnerabilities have been discovered in squid, a WWW proxy cache. Insufficient input validation in the NTLM authentication handler allowed a remote attacker to crash the service by sending a specially crafted NTLMSSP packet. Likewise, due to an insufficient...

[SECURITY] [DSA 576-1] New Squid packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 576-1 [email protected] http://www.debian.org/security/ Martin Schulze October 29th, 2004 http://www.debian.org/security/faq -...

SuSE-SA:2004:016: squid

The remote host is missing the patch for the advisory SuSE-SA:2004:016 squid. Squid is a feature-rich web-proxy with support for various web-related protocols. The NTLM authentication helper application of Squid is vulnerable to a buffer overflow that can be exploited remotely by using a long...

CVE-2002-0713

Buffer overflows in Squid before 2.4.STABLE6 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code 1 via the MSNT auth helper msntauth when using denyusers or allowusers files, 2 via the gopher client, or 3 via the FTP server directory listing parser when...