103 matches found
DLA-524-1 squidguard - security update
Bulletin has no description...
SquidGuard Cross-Site Scripting Vulnerability
Shalla Secure Services squidGuard is a URL redirection plug-in for Squid proxy server and web caching server software from Shalla Secure Services, Germany. A cross-site scripting vulnerability exists in versions 1.3 and 1.4 of squidGuard. An attacker can exploit this vulnerability to inject...
SquidGuard 1.x NULL URL Character Unauthorized Access Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9919/info Reportedly SquidGuard is prone to a remote NULL URL character unauthorized access vulnerability. This issue is due to a failure of the application to properly filter out invalid URIs. Successful exploitation of...
openSUSE Security Update : squidGuard (openSUSE-SU-2010:0460-1)
Two buffer overflows in squidGard were fixed : CVE-2009-3700: Buffer overflow in sgLog.c in squidGuard 1.3 and 1.4 allows remote attackers to cause a denial of service application hang or loss of blocking functionality via a long URL with many / slash characters, related to 'emergency mode.'...
squidguard DoS
Request to oversized URL causes protection to switch off...
squidGuard 1.4 - Remote Denial of Service - POC
We're using squidGuard 1.4 and discovered a possible denial of service. When a user is accessing a very long URL, a internal buffer is too small and squidguard is entering emergency mode. In this mode, no blocking is done anymore. The URL for reference:...
SquidGuard 1.4 - Long URL Handling Remote Denial of Service
SquidGuard 1.4 - Long URL Handling Remote Denial of Service source: https://www.securityfocus.com/bid/55291/info squidGuard is prone to a remote denial-of-service vulnerability. A successful exploit will cause the application to enter emergency mode in which URLs are not blocked. This will result...
SquidGuard 1.4 - Long URL Handling Remote Denial of Service
source: https://www.securityfocus.com/bid/55291/info squidGuard is prone to a remote denial-of-service vulnerability. A successful exploit will cause the application to enter emergency mode in which URLs are not blocked. This will result in a denial-of-service condition. squidGuard 1.4 is...
squidGuard 1.4 Denial Of Service
We're using squidGuard 1.4 and discovered a possible denial of service. When a user is accessing a very long URL, a internal buffer is too small and squidguard is entering emergency mode. In this mode, no blocking is done anymore. The URL for reference:...
squidclamav -- Denial of Service
SquidClamav developers report: Add a workaround for a squidGuard bug that unescape the URL and send it back unescaped. This result in garbage staying into pipe of the system command call and could crash squidclamav on next read or return false information. This is specially true with URL containi...
openSUSE Security Update : squidGuard (openSUSE-SU-2010:0460-1)
Two buffer overflows in squidGard were fixed : CVE-2009-3700: Buffer overflow in sgLog.c in squidGuard 1.3 and 1.4 allows remote attackers to cause a denial of service application hang or loss of blocking functionality via a long URL with many / slash characters, related to 'emergency mode.'...
openSUSE Security Update : squidGuard (openSUSE-SU-2010:0460-1)
Two buffer overflows in squidGard were fixed : CVE-2009-3700: Buffer overflow in sgLog.c in squidGuard 1.3 and 1.4 allows remote attackers to cause a denial of service application hang or loss of blocking functionality via a long URL with many / slash characters, related to 'emergency mode.'...
Debian: Security Advisory (DSA-2040-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 2040-1 (squidguard)
The remote host is missing an update to squidguard announced via advisory DSA 2040-1. OpenVAS Vulnerability Test $Id: deb20401.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2040-1 squidguard Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...
Debian DSA-2040-1 : squidguard - buffer overflow
It was discovered that in squidguard, a URL redirector/filter/ACL plugin for squid, several problems in src/sgLog.c and src/sgDiv.c allow remote users to either : - cause a denial of service, by requesting long URLs containing many slashes; this forces the daemon into emergency mode, where it doe...
[SECURITY] [DSA 2040-1] New squidguard packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-2040-1 [email protected] http://www.debian.org/security/ Sébastien Delafond May 02, 2010 http://www.debian.org/security/faq -...
DSA-2040-1 squidguard - several vulnerabilities
Bulletin has no description...
Mandriva Update for squidGuard MDVSA-2009:293-1 (squidGuard)
Check for the Version of squidGuard OpenVAS Vulnerability Test Mandriva Update for squidGuard MDVSA-2009:293-1 squidGuard Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
Mandriva Update for squidGuard MDVSA-2009:293-1 (squidGuard)
Check for the Version of squidGuard OpenVAS Vulnerability Test Mandriva Update for squidGuard MDVSA-2009:293-1 squidGuard Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
Mandriva Security Advisory MDVSA-2009:293 (squidGuard)
The remote host is missing an update to squidGuard announced via advisory MDVSA-2009:293. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...