6209 matches found
CVE-2005-2794
store.c in Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service crash via certain aborted requests that trigger an assert error related to STOREPENDING...
CVE-2005-2796
The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service segmentation fault via certain crafted requests...
CVE-2005-2794
store.c in Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service crash via certain aborted requests that trigger an assert error related to STOREPENDING...
CVE-2005-2796
The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service segmentation fault via certain crafted requests...
Squid: Denial of Service vulnerabilities
Background Squid is a full-featured Web proxy cache designed to run on Unix-like systems. It supports proxying and caching of HTTP, FTP, and other protocols, as well as SSL support, cache hierarchies, transparent caching, access control lists and many more features. Description Certain malformed...
Squid < 2.5.STABLE11 sslConnectTimeout DoS
Binary data 3206.prm...
Squid "sslConnectTimeout()" Denial of Service Vulnerability
Secunia Advisory: SA16674 Release Date: 2005-09-02 Critical: Moderately critical Impact: DoS Where: From remote Solution Status: Vendor Patch Software: Squid 2.x Select a product and view a complete list of all Patched/Unpatched Secunia advisories affecting it. Description: Alex Masterov has...
CVE-2004-2479
Squid Web Proxy Cache 2.5 might allow remote attackers to obtain sensitive information via URLs containing invalid hostnames that cause DNS operations to fail, which results in references to previously used error messages...
CVE-2004-2479
Squid Web Proxy Cache 2.5 might allow remote attackers to obtain sensitive information via URLs containing invalid hostnames that cause DNS operations to fail, which results in references to previously used error messages...
CVE-2004-2480
Squid Web Proxy Cache 2.3.STABLE5 allows remote attackers to bypass security controls and access arbitrary websites via "@@" sequences in a URL within Internet Explorer...
CVE-2004-2479
The CVE-2004-2479 issue affects Squid Web Proxy Cache (2.5 era) where a remote attacker can cause DNS operations to fail by submitting URLs with invalid hostnames, leading Squid to reference previously used error messages. Connected advisories confirm this vulnerability and describe updates to Sq...
CVE-2004-2480
CVE-2004-2480 affects Squid Web Proxy Cache 2.3.STABLE5. The vulnerability allows remote attackers to bypass security controls and access arbitrary websites via "@@" sequences in a URL processed by Internet Explorer. The provided materials do not specify root cause details, affected versions beyo...
CVE-2004-2480
Squid Web Proxy Cache 2.3.STABLE5 allows remote attackers to bypass security controls and access arbitrary websites via "@@" sequences in a URL within Internet Explorer...
squid -- Possible Denial Of Service Vulnerability in store.c
The squid patches page notes: Squid crashes with the above assertion failure assertion failed: store.c:523: "e-storestatus == STOREPENDING" in certain conditions involving aborted requests...
squid -- Denial Of Service Vulnerability in sslConnectTimeout
The squid patches page notes: After certain slightly odd requests Squid crashes with a segmentation fault in sslConnectTimeout...
Squid Set-Cookie Header Cross-session Information Disclosure
The remote Squid caching proxy, according to its banner, is prone to an information disclosure vulnerability. Due to a race condition, Set-Cookie headers may leak to other users if the requested server employs the deprecated Netscape Set-Cookie specifications with regards to how cacheable content...
FreeBSD : squid -- correct handling of oversized HTTP reply headers (bfda39de-7467-11d9-9e1e-c296ac722cb3)
The squid patches page notes : This patch addresses a HTTP protocol mismatch related to oversized reply headers. In addition it enhances the cache.log reporting on reply header parsing failures to make it easier to track down which sites are malfunctioning. It is believed that this bug may lead t...
FreeBSD : squid -- HTTP response splitting cache pollution attack (4e4bd2c2-6bd5-11d9-9e1e-c296ac722cb3)
According to a whitepaper published by Sanctum, Inc., it is possible to mount cache poisoning attacks against, among others, squid proxies by inserting false replies into the HTTP stream. The squid patches page notes : This patch additionally strengthens Squid from the HTTP response attack...
FreeBSD : squid (1901)
The following package needs to be updated: squid %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-2006 Jacques Vidrine and contributors Redistribution and use in source VuXML and 'compiled' forms SGML, HTML, PDF, PostScrip...
FreeBSD : squid -- possible information disclosure (f0db930b-496b-11d9-bf86-0050569f0001)
The squid-2.5 patches pages notes : In certain conditions Squid returns random data as error messages in response to malformed host name, possibly leaking random internal information which may come from other requests. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...