CVE-2005-3322

Unspecified vulnerability in Squid on SUSE Linux 9.0 allows remote attackers to cause a denial of service crash via HTTPs SSL...

Fedora Core 4 : squid-2.5.STABLE11-3.FC4 (2005-1009)

Thu Oct 20 2005 Martin Stransky 7:2.5.STABLE11-3.FC4 - fix for 171213 - CVE-2005-3258 Squid crash due to malformed FTP response - more fixes from upstream Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

Fedora Core 3 : squid-2.5.STABLE11-3.FC3 (2005-1010)

Thu Oct 20 2005 Martin Stransky 7:2.5.STABLE11-3.FC3 - fix for 171213 - CVE-2005-3258 Squid crash due to malformed FTP response - more fixes from upstream Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

CVE-2005-3258

The rfc1738doescape function in ftp.c for Squid 2.5 STABLE11 and earlier allows remote FTP servers to cause a denial of service segmentation fault via certain "odd" responses...

CVE-2005-3258

The rfc1738doescape function in ftp.c for Squid 2.5 STABLE11 and earlier allows remote FTP servers to cause a denial of service segmentation fault via certain "odd" responses...

CVE-2005-3258

CVE-2005-3258 affects Squid 2.5 STABLE11 and earlier, where the rfc1738_do_escape function in ftp.c can be triggered by certain FTP responses to cause a denial-of-service (segmentation fault). The connected advisories and scans consistently reference Squid updates to address this issue (e.g., Fed...

CVE-2005-3258

The rfc1738doescape function in ftp.c for Squid 2.5 STABLE11 and earlier allows remote FTP servers to cause a denial of service segmentation fault via certain "odd" responses...

CVE-2005-3258

The rfc1738doescape function in ftp.c for Squid 2.5 STABLE11 and earlier allows remote FTP servers to cause a denial of service segmentation fault via certain "odd" responses...

[SA17271] Squid FTP Server Response Handling Denial of Service

TITLE: Squid FTP Server Response Handling Denial of Service SECUNIA ADVISORY ID: SA17271 VERIFY ADVISORY: http://secunia.com/advisories/17271/ CRITICAL: Less critical IMPACT: DoS WHERE: From remote SOFTWARE: Squid 2.x http://secunia.com/product/310/ DESCRIPTION: M.A.Young has reported a...

Squid proxy server DoS

Server crash on parsing FTP Server response...

Mandrake Linux Security Advisory : squid (MDKSA-2005:181)

Squid 2.5.9, while performing NTLM authentication, does not properly handle certain request sequences, which allows attackers to cause a denial of service daemon restart. The updated packages have been patched to address these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

squid -- FTP server response handling denial of service

A Secunia Advisory reports: M.A.Young has reported a vulnerability in Squid, which can be exploited by malicious people to cause a DoS Denial of Service. The vulnerability is caused due to an error in handling certain FTP server responses. This can be exploited to crash Squid by visiting a...

Squid Crafted NTLM Authentication Header DoS

The version of Squid, an open source web proxy cache, installed on the remote host will abort if it receives a specially crafted NTLM challenge packet. A remote attacker can exploit this issue to stop the affected application, thereby denying access to legitimate users. C Tenable Network Security...

SUSE-SA:2005:053: squid

The remote host is missing the patch for the advisory SUSE-SA:2005:053 squid. This update of the Squid web-proxy fixes two remotely exploitable denial of service vulnerabilities. One can be triggered by aborting a request CVE-2005-2794 due to a faulty assertion. The other one occurs in...

Debian DSA-828-1 : squid - authentication handling

Upstream developers of squid, the popular WWW proxy cache, have discovered that changes in the authentication scheme are not handled properly when given certain request sequences while NTLM authentication is in place, which may cause the daemon to restart. %NASLMINLEVEL 70300 C Tenable Network...

Mandrake Linux Security Advisory : squid (MDKSA-2005:162)

Two vulnerabilities were recently discovered in squid : The first is a DoS possible via certain aborted requests that trigger an assertion error related to 'STOPPENDING' CVE-2005-2794. The second is a DoS caused by certain crafted requests and SSL timeouts CVE-2005-2796. The updated packages have...

USN-192-1: Squid vulnerability

Mike Diggins discovered a remote Denial of Service vulnerability in Squid. Sending specially crafted NTML authentication requests to Squid caused the server to crash...

DEBIAN-CVE-2005-2917

Squid 2.5.STABLE10 and earlier, while performing NTLM authentication, does not properly handle certain request sequences, which allows attackers to cause a denial of service daemon restart...

CVE-2005-2917

Squid 2.5.STABLE10 and earlier, while performing NTLM authentication, does not properly handle certain request sequences, which allows attackers to cause a denial of service daemon restart...

CVE-2005-2917

Squid 2.5.STABLE10 and earlier, while performing NTLM authentication, does not properly handle certain request sequences, which allows attackers to cause a denial of service daemon restart...