[SECURITY] Fedora 16 Update: squid-3.2.0.11-1.fc16

Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DN...

Security fix for the ALT Linux 8 package squid version 3.1.15-alt1

Sept. 7, 2011 Vitaly Kuznetsov 3.1.15-alt1 - 3.1.15 with CVE-2011-3205 fix...

Fedora 16 : squid-3.2.0.11-1.fc16 (2011-11728)

Upstream 3.2.0.11 release fixing a buffer overflow issue in gopher:// processing rebuild for rpm Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

CVE-2011-3205

Buffer overflow in the gopherToHTML function in gopher.cc in the Gopher reply parser in Squid 3.0 before 3.0.STABLE26, 3.1 before 3.1.15, and 3.2 before 3.2.0.11 allows remote Gopher servers to cause a denial of service memory corruption and daemon restart or possibly have unspecified other impac...

Buffer overflow

Buffer overflow in the gopherToHTML function in gopher.cc in the Gopher reply parser in Squid 3.0 before 3.0.STABLE26, 3.1 before 3.1.15, and 3.2 before 3.2.0.11 allows remote Gopher servers to cause a denial of service memory corruption and daemon restart or possibly have unspecified other impac...

CVE-2011-3205

Buffer overflow in the gopherToHTML function in gopher.cc in the Gopher reply parser in Squid 3.0 before 3.0.STABLE26, 3.1 before 3.1.15, and 3.2 before 3.2.0.11 allows remote Gopher servers to cause a denial of service memory corruption and daemon restart or possibly have unspecified other impac...

CVE-2011-3205

CVE-2011-3205 affects Squid 3.0 before 3.0.STABLE26, 3.1 before 3.1.15, and 3.2 before 3.2.0.11. Description: a buffer overflow in gopherToHTML (gopher.cc) enables a remote Gopher server to trigger memory corruption and daemon restart (DoS) via a long line in a response; it is a regression tied t...

CVE-2011-3205

Buffer overflow in the gopherToHTML function in gopher.cc in the Gopher reply parser in Squid 3.0 before 3.0.STABLE26, 3.1 before 3.1.15, and 3.2 before 3.2.0.11 allows remote Gopher servers to cause a denial of service memory corruption and daemon restart or possibly have unspecified other impac...

PT-2011-1085 · Squid +2 · Squid +3

Name of the Vulnerable Software and Affected Versions: Squid versions 3.0 through 3.0.STABLE25 Squid versions 3.1 through 3.1.14 Squid versions 3.2 through 3.2.0.10 Description: The issue is related to a buffer overflow in the gopherToHTML function in the Gopher reply parser. This can be exploite...

Squid Proxy Gopher Remote Buffer Overflow Vulnerability

Squid Proxy is prone remote buffer-overflow vulnerability affects the Gopher-to-HTML functionality. An attacker can exploit this issue to execute arbitrary code with the privileges of the vulnerable application. Failed exploit attempts will result in a denial-of-service condition. OpenVAS...

Squid Gopher Remote Buffer Overflow Vulnerability (SQUID-2011:3)

Squid is prone remote buffer-overflow vulnerability affects the Gopher-to-HTML functionality. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only C...

Squid Gopher应答处理缓冲区溢出漏洞

Squid是一款功能强大的代理服务器和Web缓存服务器。 Squid解析来自Gopher服务器上的应答时存在缺陷，如果Gopher服务器返回的行超过4096字节可触发缓冲区溢出，此溢出可导致内存破坏一般可使Squid崩溃。 恶意用户必须设置伪造的Gopher服务器，并转发请求通过Squid。成功利用漏洞允许以服务器上下文执行任意代码。 Squid 3.x 厂商解决方案 Squid 3.0.STABLE26或3.1.15版本已经修复此漏洞，建议用户下载使用： http://www.squid-cache.org/...

HTTPKiller - (Global HTTP DoS)

Connection Keep-Alive + Pipelining + Close the connection before the response + Something... = DoS Apache, IIS, Squid, NetCache, What else?...

squid security and bug fix update

3.1.10-1 - Resolves: 639365 - Rebase squid to version 3.1.10 - Resolves: 666533 - small memleak in squid-3.1.4...

RHEL 6 : squid (RHSA-2011:0545)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2011:0545 advisory. Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. It was found that string comparison...

Squid: Denial of service due internal error in string handling (SQUID-2010:3)

The string-comparison functions in String.cci in Squid 3.x before 3.1.8 and 3.2.x before 3.2.0.2 allow remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted request...

Low: Red Hat Security Advisory: squid security and bug fix update

An updated squid package that fixes one security issue and two bugs is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...

Squid WCCP Message Receive Buffer Overflow (CVE-2005-0211)

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. An attacker can exploit this vulnerability to terminate the vulnerable product, creating a denial of service condition, or it can be exploited for code. A remote vulnerability was found in Squid web proxy/cache processes...

Squid-Imposter: A Squid Based Sidejacking Proxy !

That tool was meant specifically for Windows operating systems and also contains a module that uses HTML5 offline cache to store the payload permanently in all supporting browsers. Squid-Imposter just add the HTML5 offline cache storage functionality to the application and has been ported to Linu...

Fedora Update for squid FEDORA-2010-14149

Check for the Version of squid OpenVAS Vulnerability Test Fedora Update for squid FEDORA-2010-14149 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...