CVE-2002-0713

CVE-2002-0713 refers to buffer overflows in Squid before 2.4.STABLE6 causing denial of service and possible arbitrary code execution via (1) MSNT_AUTH helper with denyusers/allowusers, (2) the gopher client, and (3) FTP directory listing parser when HTML output is generated. Connected advisories ...

CVE-2002-0715

Vulnerability in Squid before 2.4.STABLE6 related to proxy authentication credentials may allow remote web sites to obtain the user's proxy login and password...

Important: Red Hat Security Advisory: squid security update

New Squid packages are available which fix various issues. Squid is a high-performance proxy caching server. The following summary describes the various issues found and fixed: Several buffer overflows have been found in the MSTN auth helper msntauth when configured to use denyusers or allowusers...

Important: Red Hat Security Advisory: : : : New Squid packages available

New Squid packages are available which fix various security issues. Updated 16 April 2003 Added packages for Red Hat Linux on IBM iSeries and pSeries systems. Squid is a high-performance proxy caching server. The following summary describes the various issues found and their resolutions. A proble...

Buffer overflows and multiple bugs in squid

Buffer overflow on ftp:// URLs, memory leaks, etc...

Squid Security Update Advisory 2002:3

Squid Proxy Cache Security Update Advisory SQUID-2002:3 Advisory ID: SQUID-2002:3 Date: July 3, 2002 Summary: Squid-2.4.STABLE7 released to address a number of security related issues. Affected versions: Squid-2.x up to and including 2.4.STABLE6 http://www.squid-cache.org/Advisories/SQUID-20023.t...

CVE-2001-1030

CVE-2001-1030 affects the Squid proxy server when used in HTTP accelerator mode. The vulnerability exists if httpd_accel_host and http_accel_with_proxy are off, enabling an attacker to bypass ACLs and perform unauthorized activities such as port scanning. Concrete details from connected sources i...

CVE-2001-1030

Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists ACLs when the httpdaccelhost and httpaccelwithproxy off settings are used, which allows attackers to bypass the ACLs and conduct unauthorized activities such as port scanning...

[DER #11] - Remotey exploitable fmt string bug in squid

------------------------------------------- - DAVID EVLIS REIGN SECURITY ADVISORY 11 - ------------------------------------------- - WHAT - Remotely Exploitable Format string Hole - WHO - MSNT squid auth for NtDomains - DETAILS ON PRODUCT - This is an authentication module for the Squid proxy...

Format string bug in squid

Format string bug in NT domain authorization module...

Squid 2.4.1 - Remote Buffer Overflow

Squid 2.4.1 - Remote Buffer Overflow / 7350squish - x86/linux squid remote exploit TESO CONFIDENTIAL - SOURCE MATERIALS This is unpublished proprietary source code of TESO Security. The contents of these coded instructions, statements and computer programs may not be disclosed to third parties,...

Squid 2.4.1 - Remote Buffer Overflow

/ 7350squish - x86/linux squid remote exploit TESO CONFIDENTIAL - SOURCE MATERIALS This is unpublished proprietary source code of TESO Security. The contents of these coded instructions, statements and computer programs may not be disclosed to third parties, copied or duplicated in any form, in...

Squid 2.4.1 Remote Buffer Overflow Exploit

Exploit for linux platform in category remote exploits ========================================== Squid 2.4.1 Remote Buffer Overflow Exploit ========================================== / 7350squish - x86/linux squid remote exploit TESO CONFIDENTIAL - SOURCE MATERIALS This is unpublished proprietar...

Format string bug in pam_ldap/squid_auth_ldap

Format string bug on syslog call...

ldap vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - --- Blackshell Advisory 5 --- Local Format String Vuln in pamldap and remote in squidauthldap - --- Blackshell Advisory 5 --- - --- Versions Affected --- pamldap: 143 prior vendor status: nil squidauthldap: 2.0 prior vendor status: nil - --- What is...

Squid FTP URL Special Character Handling Remote Overflow

The remote squid caching proxy, according to its version number, is vulnerable to various buffer overflows. An attacker may use these to gain a shell on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

CVE-2002-0163

Heap-based buffer overflow in Squid before 2.4 STABLE4, and Squid 2.5 and 2.6 until March 12, 2002 distributions, allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via compressed DNS responses...

updated squid advisory

Apologies - it should be stable6, not stable5. Here's the updated one: Squid Proxy Cache Security Update Advisory SQUID-2002:2 Advisory ID: SQUID-2002:2 Date: March 26, 2002 Affected versions: Squid-2.x up to and including 2.4.STABLE4 Reported by: zen-parse [email protected]...

squid DNS DoS

Server can crash on malformed sompresses DNS reply...

FreeBSD-SA-02:19.squid

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:19 Security Advisory FreeBSD, Inc. Topic: squid heap buffer overflow in DNS handling Category: ports Module: squid24 Announced: 2002-03-26 Credits: zen-parse Affects:...