[SECURITY] [DSA 809-1] New squid packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 809-1 [email protected] http://www.debian.org/security/ Martin Schulze September 13th, 2005 http://www.debian.org/security/faq -...

[OpenPKG-SA-2005.021] OpenPKG Security Advisory (squid)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 OpenPKG Security Advisory The OpenPKG Project http://www.openpkg.org/security.html http://www.openpkg.org [email protected] [email protected] OpenPKG-SA-2005.021 10-Sep-2005 Package: squid Vulnerability: denial of service OpenPKG Specific...

Debian DSA-809-2 : squid - several vulnerabilities

Certain aborted requests that trigger an assertion in squid, the popular WWW proxy cache, may allow remote attackers to cause a denial of service. This update also fixes a regression caused by DSA 751. For completeness below is the original advisory text : Several vulnerabilities have been...

Squid proxy server DoS

Error in sslConnectTimeout function causes server to crash. Aborted request causes assert in proxy server...

DSA-809-1 squid - several

Bulletin has no description...

GLSA-200509-06 : Squid: Denial of Service vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200509-06 Squid: Denial of Service vulnerabilities Certain malformed requests result in a segmentation fault in the sslConnectTimeout function, handling of other certain requests trigger assertion failures. Impact : By performing...

squid -- possible denial of service condition regarding NTLM authentication

The squid patches page notes: Squid may crash with the above error FATAL: Incorrect scheme in auth header when given certain request sentences. Workaround: disable NTLM authentication...

Fedora Core 3 : squid-2.5.STABLE9-1.FC3.4 (2005-276)

Wed Mar 23 2005 Jay Fenlason 7:2.5.STABLE9-1.FC3.4 - Add more upstream patches. - add the -libbind patch, to avoid picking up a new dependency on libbind. - Remove references to /etc/squid/errors from this spec, since squid now uses datadir/squid/errors/English/ by default overridable in...

Fedora Core 3 : squid-2.5.STABLE8-1.FC3.1 (2005-154)

This update fixes CVE-2005-0446 Squid DoS from bad DNS response Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additiona...

Fedora Core 2 : squid-2.5.STABLE8-1.FC2.1 (2005-153)

This update fixes CVE-2005-0446 Squid DoS from bad DNS response Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additiona...

CVE-2005-2796

The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service segmentation fault via certain crafted requests...

DEBIAN-CVE-2005-2796

The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service segmentation fault via certain crafted requests...

CVE-2005-2794

store.c in Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service crash via certain aborted requests that trigger an assert error related to STOREPENDING...

CVE-2005-2794

store.c in Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service crash via certain aborted requests that trigger an assert error related to STOREPENDING...

CVE-2005-2796

The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service segmentation fault via certain crafted requests...

CVE-2005-2796

The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service segmentation fault via certain crafted requests...

CVE-2005-2794

store.c in Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service crash via certain aborted requests that trigger an assert error related to STOREPENDING...

DEBIAN-CVE-2005-2794

store.c in Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service crash via certain aborted requests that trigger an assert error related to STOREPENDING...

CVE-2005-2794

CVE-2005-2794 affects Squid (2.5.STABLE10 and earlier). The issue arises when certain aborted requests trigger an assert in STORE_PENDING, allowing remote attackers to cause a denial of service (crash). The connected OpenVAS entries reference Debian, Gentoo, SuSE and FreeBSD advisories documentin...

CVE-2005-2796

CVE-2005-2796 affects Squid up to version 2.5.STABLE10 and earlier, with the sslConnectTimeout path in ssl.c being exploitable. The vulnerability allows remote attackers to trigger a denial of service (segmentation fault) by sending certain crafted requests. OpenVAS entries and advisories confirm...