Сканирование портов через cachemgr.cgi в squid (unauthorized access)

Можно пробовать подключаться к портам внутри закрытой сети...

cachemgr.cgi (squid 2.3STABLE4)

IP6 Concept: Squid cachemgr.cgi misconfiguration - IP6 Configuration error BID error class - IP6 Platform investigated: Linux Redhat 6.2 Squid 2.3STABLE4 Apache 1.3.12 - IP6 The problem... Due to a misconfiguration on Apache and Squid Is posible to use cachemgr.cgi shipped with Squid to scan...

CVE-2001-0843

Squid proxy server 2.4 and earlier allows remote attackers to cause a denial of service crash via a mkdir-only FTP PUT request...

FreeBSD-SA-01:61.squid

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:61 Security Advisory FreeBSD, Inc. Topic: Squid in accelerator-only mode ignores ACLs Category: ports Modules: squid22, squid23, squid24 Announced: 2001-10-08 Credits:...

Squid mkdir-only PUT Request Remote DoS

A problem exists in the way the remote Squid proxy server handles a special 'mkdir-only' PUT request, and causes denial of service to the proxy server. An attacker may use this flaw to prevent your LAN users from accessing the web. %NASLMINLEVEL 70300 This script was written by Adam Baldwin See t...

[SECURITY] [DSA-077-1] squid FTP PUT problem

Package : squid Problem type : remote DoS Debian-specific: no Vladimir Ivaschenko found a problem in squid a popular proxy cache. He discovered that there was a flaw in the code to handle FTP PUT commands: when a mkdir-only request was done squid would detect an internal error and exit. Since squ...

squid DoS

Dear All, I'd like to inform about a DoS bug I recently found in SQUID regarding handling of mkdir-only PUT requests - please look at http://www.squid-cache.org/bugs/showbug.cgi?id=233 for more info. From my testing, it applies both to Squid 2.3 and 2.4 series. Tested on RedHat 6.2 and 7.1. This...

DoS против squid

При PUT-запросе с URL ftp-директории происходит обращение по нулевому адресу...

CVE-1999-1273

CVE-1999-1273 concerns Squid Internet Object Cache 1.1.20, where an attacker can bypass access control lists (ACLs) by encoding the URL with hexadecimal escape sequences. The initial data states the vulnerability exists in Squid 1.1.20 and enables ACL evasion, with CVSS v2.0 base metrics reflecti...

CVE-1999-1273

Squid Internet Object Cache 1.1.20 allows users to bypass access control lists ACLs by encoding the URL with hexadecimal escape sequences...

CVE-1999-1273: Undefined Security Weakness

Squid Internet Object Cache 1.1.20 allows users to bypass access control lists ACLs by encoding the URL with hexadecimal escape sequences...

Дырка в squid при httpd acceleration (port scanning)

При включенном httpdaccel можно направить HTTP запрос на любой IP и любой порт, в том числе и во внутреннюю сеть...

Squid httpd acceleration acl bug enables portscanning

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Security Advisory: NASR-2001-001 [email protected] Date: 18 July 2001 Summary: Squid can be used to proxy and also portscan if set up as a httpd accelerator reverse proxy. Versions Affected: 2.3STABLE3 and 2.3STABLE4 unpatched This includes the RedHa...

CVE-2001-1030

Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists ACLs when the httpdaccelhost and httpaccelwithproxy off settings are used, which allows attackers to bypass the ACLs and conduct unauthorized activities such as port scanning...

Squid Web Proxy 2.3 - Reverse Proxy

Squid Web Proxy 2.3 - Reverse Proxy source: https://www.securityfocus.com/bid/3062/info Squid is a free client-side web proxy that retrieves cached web pages for quick browsers and a reduction in bandwidth consumption. Squid servers, when configured as an "HTTP accelerator only", may allow remote...

CVE-2001-0142

CVE-2001-0142 affects squid 2.3 and earlier. The issue is a local symlink/race condition that can cause local users to overwrite arbitrary files via temporary file handling in certain configurations. Impact is described as local privilege/content modification without remote access; CVSS reflects ...

CVE-2001-0142

squid 2.3 and earlier allows local users to overwrite arbitrary files via a symlink attack in some configurations...

CVE-2001-0142: Undefined Security Weakness

squid 2.3 and earlier allows local users to overwrite arbitrary files via a symlink attack in some configurations...

CVE-2001-0142

squid 2.3 and earlier allows local users to overwrite arbitrary files via a symlink attack in some configurations...

[SECURITY] [DSA 019-1] New version of squid released

---------------------------------------------------------------------------- Debian Security Advisory DSA-019-1 [email protected] http://www.debian.org/security/ Martin Schulze January 25, 2001 - ---------------------------------------------------------------------------- Package : squid...