Squid < 2.6.STABLE12 src/client_side.c clientProcessRequest() function TRACE Request DoS

A vulnerability in TRACE request processing has been reported in Squid, which can be exploited by malicious people to cause a denial of service. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid24873; scriptversion"1.21";...

Squid < 2.6.STABLE18 Update Reply Processing DoS

Binary data 4305.prm...

Squid < 2.6 STABLE12 TRACE Request DoS

Binary data 3952.prm...

DEBIAN-CVE-2007-1560

The clientProcessRequest function in src/clientside.c in Squid 2.6 before 2.6.STABLE12 allows remote attackers to cause a denial of service daemon crash via crafted TRACE requests that trigger an assertion error...

CVE-2007-1560

The clientProcessRequest function in src/clientside.c in Squid 2.6 before 2.6.STABLE12 allows remote attackers to cause a denial of service daemon crash via crafted TRACE requests that trigger an assertion error...

CVE-2007-1560

The clientProcessRequest function in src/clientside.c in Squid 2.6 before 2.6.STABLE12 allows remote attackers to cause a denial of service daemon crash via crafted TRACE requests that trigger an assertion error...

CVE-2007-1560

The clientProcessRequest function in src/clientside.c in Squid 2.6 before 2.6.STABLE12 allows remote attackers to cause a denial of service daemon crash via crafted TRACE requests that trigger an assertion error...

CVE-2007-1560

The clientProcessRequest function in src/clientside.c in Squid 2.6 before 2.6.STABLE12 allows remote attackers to cause a denial of service daemon crash via crafted TRACE requests that trigger an assertion error...

CVE-2007-1560

CVE-2007-1560 affects Squid 2.6 up to 2.6.STABLE12, where clientProcessRequest() in src/client_side.c mishandles crafted TRACE requests, triggering an assertion error and causing the daemon to crash (DoS). The issue is publicly documented with a base CVSS v2 score of 5.0 (Network attack, single-h...

CVE-2007-1560

The clientProcessRequest function in src/clientside.c in Squid 2.6 before 2.6.STABLE12 allows remote attackers to cause a denial of service daemon crash via crafted TRACE requests that trigger an assertion error...

Squid < 2.6.STABLE7 Multiple Remote DoS

Two vulnerabilities have been reported in Squid, which can be exploited by malicious people to cause a denial of service. Changes by Tenable: - added scriptname, revised description, added script dependency - added code to only run if report paranoia is "Paranoid". - fixed regex, added report...

Squid -- TRACE method handling denial of service

Squid advisory 2007:1 notes: Due to an internal error Squid-2.6 is vulnerable to a denial of service attack when processing the TRACE request method. Workarounds: To work around the problem deny access to using the TRACE method by inserting the following two lines before your first httpaccess rul...

MDKA-2006:038 : squid

This update fixes a problem in the squid package as shipped for Mandriva Linux 2007 which affects only the x8664 architecture. On that platform, squid would not start, giving the following message: FATAL: Bungled Default Configuration line 44: hostsfile This has been fixed in the updated packages...

Mandrake Linux Security Advisory : squid (MDKSA-2007:026)

A vulnerability in squid was discovered that could be remotely exploited by using a special ftp:// URL CVE-2007-0247. Another Denial of Service vulnerability was discovered in squid 2.6 that allows remote attackers to crash the server by causing an externalaclqueue overload CVE-2007-0248...

SUSE-SA:2007:012: squid

The remote host is missing the patch for the advisory SUSE-SA:2007:012 squid. This update fixes a remotely exploitable denial-of-service bug in squid that can be triggered by using special ftp:// URLs. CVE-2007-0247 Additionally the 10.2 package needed a fix for another DoS bug CVE-2007-0248 and...

GLSA-200701-22 : Squid: Multiple Denial of Service vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200701-22 Squid: Multiple Denial of Service vulnerabilities Squid fails to correctly handle ftp:// URI's. There is also an error in the externalacl queue which can cause an infinite looping condition. Impact : An attacker could...

USN-414-1: Squid vulnerabilities

David Duncan Ross Palmer and Henrik Nordstrom discovered that squid incorrectly handled special characters in FTP URLs. Remote users with access to squid could crash the server leading to a denial of service. CVE-2007-0247 Erick Dantas Rotole and Henrik Nordstrom discovered that squid could end u...

Squid: Multiple Denial of Service vulnerabilities

Background Squid is a multi-protocol proxy server. Description Squid fails to correctly handle ftp:// URI's. There is also an error in the externalacl queue which can cause an infinite looping condition. Impact An attacker could attempt to retrieve a specially crafted URI via a Squid server causi...

Squid Proxy FTP URI远程拒绝服务漏洞

Squid是一款开放源代码的代理服务器。 Squid处理FTP URI存在安全问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 构建恶意的FTP URI，在让Squid处理时，可导致代理服务器崩溃： ftp://www.example.com/sample/directory;type=d Squid Web Proxy Cache 2.6.STABLE6 Squid Web Proxy Cache 2.6.STABLE5 Squid Web Proxy Cache 2.6.STABLE4 Squid Web Proxy Cache 2.6.STABLE3 Squid Web...

Fedora Core 5 : squid-2.5.STABLE14-3.FC5 (2007-092)

Wed Jan 17 2007 Martin Stransky - 7:2.5.STABLE14-3.FC5 - added fix for 222883 - Squid crashes when receiving certain FTP listings CVE-2007-0247 - Thu Jun 8 2006 Martin Stransky - 7:2.5.STABLE14-2.FC5 - fix for squid BZ1511 - assertion failed: HttpReply.c:105: 'rep' Note that Tenable Network...