6209 matches found
Ubuntu 4.10 : squid vulnerabilities (USN-19-1)
Recently, two Denial of Service vulnerabilities have been discovered in squid, a WWW proxy cache. Insufficient input validation in the NTLM authentication handler allowed a remote attacker to crash the service by sending a specially crafted NTLMSSP packet. Likewise, due to an insufficient...
Ubuntu 4.10 / 5.04 : squid vulnerability (USN-129-1)
It was discovered that Squid did not verify the validity of DNS server responses. When Squid is started, it opens a DNS client UDP port whose number is randomly assigned by the operating system. Unless your network firewall is configured to accept DNS responses only from known good nameservers,...
Ubuntu 4.10 : squid vulnerabilities (USN-67-1)
infamous41md discovered several Denial of Service vulnerabilities in squid. A malicious Gopher server could crash squid by sending a line bigger than 4096 bytes. CAN-2005-0094 If squid is configured to send WCPP Web Cache Communication Protocol messages to a 'home router', an attacker who was abl...
Ubuntu 4.10 / 5.04 : squid vulnerability (USN-122-1)
Michael Bhola discovered that errors in the httpaccess configuration, in particular missing or invalid ACLs, did not cause a fatal error. This could lead to wider access permissions than intended by the administrator. Note that Tenable Network Security has extracted the preceding description bloc...
Ubuntu 4.10 : squid vulnerability (USN-111-1)
A remote Denial of Service vulnerability has been discovered in Squid. If the remote end aborted the connection during a PUT or POST request, Squid tried to free an already freed part of memory, which eventually caused the server to crash. Note that Tenable Network Security has extracted the...
Ubuntu 4.10 : squid vulnerabilities (USN-77-1)
A possible authentication bypass was discovered in the LDAP authentication backend. LDAP ignores leading and trailing whitespace in search filters. This could possibly be abused to bypass explicit access controls or confuse accounting when using several variants of the login name. CAN-2005-0173...
Ubuntu 4.10 / 5.04 : squid vulnerability (USN-192-1)
Mike Diggins discovered a remote Denial of Service vulnerability in Squid. Sending specially crafted NTML authentication requests to Squid caused the server to crash. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenab...
Ubuntu 4.10 : squid vulnerabilities (USN-84-1)
When parsing the configuration file, squid interpreted empty Access Control Lists ACLs without defined authentication schemes in a non-obvious way. This could allow remote attackers to bypass intended ACLs. CAN-2005-0194 A remote Denial of Service vulnerability was discovered in the domain name...
Ubuntu 4.10 / 5.04 : squid vulnerabilities (USN-183-1)
A Denial of Service vulnerability was discovered in the handling of aborted requests. A remote attacker could exploit this to crash Squid by sending specially crafted requests. CAN-2005-2794 Alex Masterov discovered a Denial of Service vulnerability in the sslConnectTimeout function. By sending...
[SA17513] IPCop Squid Vulnerability and Web Backup Security Issue
TITLE: IPCop Squid Vulnerability and Web Backup Security Issue SECUNIA ADVISORY ID: SA17513 VERIFY ADVISORY: http://secunia.com/advisories/17513/ CRITICAL: Less critical IMPACT: Exposure of sensitive information, DoS WHERE: From remote OPERATING SYSTEM: IPCop 1.4.x http://secunia.com/product/5028...
[SECURITY] [DSA 809-3] New squid packages fix regression
-------------------------------------------------------------------------- Debian Security Advisory DSA 809-3 [email protected] http://www.debian.org/security/ Martin Schulze November 7th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 809-3] New squid packages fix regression
-------------------------------------------------------------------------- Debian Security Advisory DSA 809-3 [email protected] http://www.debian.org/security/ Martin Schulze November 7th, 2005 http://www.debian.org/security/faq -...
DSA-809-3 squid - assertion error
Bulletin has no description...
RedHat 6.0 cachemgr.cgi
RedHat Linux 6.0 installs by default a squid cache manager cgi script with no restricted access permissions. This script could be used to perform a port scan from the cgi-host machine. SPDX-FileCopyrightText: 1999 A. de Bernis Some text descriptions might be excerpted from a referenced sources, a...
Squid DoS Vulnerability
A problem exists in the way the remote Squid proxy server handles a special SPDX-FileCopyrightText: 2001 Adam Baldwin Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Squid remote denial of service
The remote squid caching proxy, according to its version number, may be vulnerable to a remote denial of service. This flaw is due to an input validation error in the SNMP module. An attacker can exploit this flaw to crash the server with a specially crafted UDP packet. OpenVAS Vulnerability Test...
Mandrake Linux Security Advisory : squid (MDKSA-2005:195)
The rfc1738doescape function in ftp.c for Squid 2.5.STABLE11 and earlier allows remote FTP servers to cause a denial of service segmentation fault via certain 'odd' responses. The updated packages have been patched to address these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
CVE-2005-3322
Unspecified vulnerability in Squid on SUSE Linux 9.0 allows remote attackers to cause a denial of service crash via HTTPs SSL...
CVE-2005-3322
CVE-2005-3322 affects Squid running on SUSE Linux 9.0. The issue is described as an unspecified vulnerability that allows remote attackers to cause a denial of service (crash) via HTTPS (SSL). The public sources do not provide a concrete root cause, exploit details, or explicit remediation steps ...
