Lucene search
+L

6209 matches found

OSV
OSV
added 2005/04/14 4:00 a.m.5 views

DEBIAN-CVE-2005-0718

Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service segmentation fault by aborting the connection during a 1 PUT or 2 POST request, which causes Squid to access previously freed memory...

5CVSS6.4AI score0.12534EPSS
SaveExploits0References1
NVD
NVD
added 2005/04/14 4:00 a.m.25 views

CVE-2005-0718

Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service segmentation fault by aborting the connection during a 1 PUT or 2 POST request, which causes Squid to access previously freed memory...

5CVSS6.4AI score0.12534EPSS
SaveExploits0References11
securityvulns
securityvulns
added 2005/04/14 12:00 a.m.79 views

[Full-disclosure] [USN-111-1] Squid vulnerability

=========================================================== Ubuntu Security Notice USN-111-1 April 14, 2005 squid vulnerability CAN-2005-0718 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 4.10 Warty Warthog The following...

5CVSS0.3AI score0.12534EPSS
SaveExploits0
securityvulns
securityvulns
added 2005/04/14 12:00 a.m.31 views

Squid proxy cache double memory free vulnerability

Double memory free on aborted PUT or POST request...

2.1AI score
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2005/03/20 5:00 a.m.26 views

CVE-2005-0813

Buffer overflow in Initial Redirect ir Squid Proxy Plug-In 0.1 and 0.2 may allow attackers to cause a denial of service and execute arbitrary code via unknown vectors...

7.8AI score0.02535EPSS
SaveExploits0References4
CVE
CVE
added 2005/03/20 5:00 a.m.47 views

CVE-2005-0813

The CVE-2005-0813 entry describes a buffer overflow in the Initial Redirect (ir) Squid Proxy Plug-In versions 0.1 and 0.2. The underlying flaw is a buffer overflow in the plug-in, with potential impacts including denial of service and arbitrary code execution. The description notes that exploitat...

5CVSS8.1AI score0.02535EPSS
SaveExploits0References4Affected Software1
securityvulns
securityvulns
added 2005/03/18 12:00 a.m.26 views

ir Squid proxy plugin buffer overflow

Off-by-one overflow...

3.7AI score
SaveExploits0References1Affected Software1
RedHat Linux
RedHat Linux
added 2005/03/16 2:58 p.m.43 views

Moderate: Red Hat Security Advisory: squid security update

An updated squid package that fixes a denial of service issue is now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Squid is a full-featured Web proxy cache. A bug was found in the way Squid handles...

5CVSS5.7AI score0.41109EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2005/03/16 2:58 p.m.10 views

security flaw

Squid 2.5.STABLE8 and earlier allows remote attackers to cause a denial of service crash via certain DNS responses regarding 1 Fully Qualified Domain Names FQDN in fqdncache.c or 2 IP addresses in ipcache.c, which trigger an assertion failure...

5CVSS5.9AI score0.41109EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2005/03/16 12:00 a.m.42 views

RHEL 4 : squid (RHSA-2005:201)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:201 advisory. Squid is a full-featured Web proxy cache. A bug was found in the way Squid handles fully qualified domain name FQDN lookups. A malicious DNS server...

5CVSS5.5AI score0.41109EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2005/03/12 5:00 a.m.32 views

CVE-2005-0718

Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service segmentation fault by aborting the connection during a 1 PUT or 2 POST request, which causes Squid to access previously freed memory...

6.3AI score0.12534EPSS
SaveExploits0References11
Debian CVE
Debian CVE
added 2005/03/12 5:00 a.m.23 views

CVE-2005-0718

Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service segmentation fault by aborting the connection during a 1 PUT or 2 POST request, which causes Squid to access previously freed memory...

5CVSS6.3AI score0.12534EPSS
SaveExploits0
CVE
CVE
added 2005/03/12 5:00 a.m.90 views

CVE-2005-0718

CVE-2005-0718 affects Squid 2.5.STABLE7 and earlier; a remote attacker can cause a denial of service by aborting a PUT or POST, leading Squid to access freed memory and crash. Public advisories (RHSA-2005:415 for SLES/CentOS, USN-111-1 for Ubuntu) document a patched package upgrade to fix this is...

5CVSS6.3AI score0.12534EPSS
SaveExploits0References11Affected Software1
Ubuntu
Ubuntu
added 2005/03/08 8:06 p.m.62 views

USN-93-1: Squid vulnerability

A race condition was discovered in the handling of "Set-Cookie" headers. If the obsolete Netscape recommendation was used for handling cookies in the cache, it was possible for an attacker to steal the cookies of other users...

2.6CVSS5.3AI score0.01352EPSS
SaveExploits0
UbuntuCve
UbuntuCve
added 2005/03/08 5:00 a.m.32 views

CVE-2005-0626

Race condition in Squid 2.5.STABLE7 to 2.5.STABLE9, when using the Netscape Set-Cookie recommendations for handling cookies in caches, may cause Set-Cookie headers to be sent to other users, which allows attackers to steal the related cookies...

2.6CVSS5.9AI score0.01352EPSS
SaveExploits0References2
OSV
OSV
added 2005/03/08 5:00 a.m.11 views

DEBIAN-CVE-2005-0626

Race condition in Squid 2.5.STABLE7 to 2.5.STABLE9, when using the Netscape Set-Cookie recommendations for handling cookies in caches, may cause Set-Cookie headers to be sent to other users, which allows attackers to steal the related cookies...

2.6CVSS6.5AI score0.01352EPSS
SaveExploits0References1
OSV
OSV
added 2005/03/08 5:00 a.m.12 views

CVE-2005-0626

Race condition in Squid 2.5.STABLE7 to 2.5.STABLE9, when using the Netscape Set-Cookie recommendations for handling cookies in caches, may cause Set-Cookie headers to be sent to other users, which allows attackers to steal the related cookies...

6.2AI score
SaveExploits0References7
NVD
NVD
added 2005/03/08 5:00 a.m.21 views

CVE-2005-0626

Race condition in Squid 2.5.STABLE7 to 2.5.STABLE9, when using the Netscape Set-Cookie recommendations for handling cookies in caches, may cause Set-Cookie headers to be sent to other users, which allows attackers to steal the related cookies...

2.6CVSS6.2AI score0.01352EPSS
SaveExploits0References7
securityvulns
securityvulns
added 2005/03/04 12:00 a.m.42 views

[SA14451] Squid Set-Cookie Header Leak Security Issue

---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...

0.1AI score
SaveExploits0
securityvulns
securityvulns
added 2005/03/04 12:00 a.m.30 views

Squid proxy Set-Cookie header race conditions cookie leak

Race condition leads to the situation Set-Cookie header is leaked to different connection...

2.2AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder