CVE-2017-11747

CVE-2017-11747 affects Tinyproxy (1.8.4 and older): main.c creates /run/tinyproxy/tinyproxy.pid after dropping privileges to a non-root account, allowing local users to modify the PID file and potentially kill the process via a root script that executes kill cat /run/tinyproxy/tinyproxy.pid. Seve...

CVE-2017-11747

main.c in Tinyproxy 1.8.4 and earlier creates a /run/tinyproxy/tinyproxy.pid file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for tinyproxy.pid modification before a root script executes a...

CVE-2017-11747

main.c in Tinyproxy 1.8.4 and earlier creates a /run/tinyproxy/tinyproxy.pid file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for tinyproxy.pid modification before a root script executes a...

CVE-2017-11747: Improper Privilege Management

main.c in Tinyproxy 1.8.4 and earlier creates a /run/tinyproxy/tinyproxy.pid file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for tinyproxy.pid modification before a root script executes a...

Tinyproxy < 1.8.3 Multiple Security Bypass Vulnerabilities

Tinyproxy is prone to multiple security bypass vulnerabilities. SPDX-FileCopyrightText: 2016 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later CPE =...

Tinyproxy Detection (HTTP)

HTTP based detection of Tinyproxy. SPDX-FileCopyrightText: 2016 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.111080"...

Tinyproxy < 1.8.4 Multiple DoS Vulnerabilities

Tinyproxy is prone to multiple remote denial of service DoS vulnerabilities that affect the SPDX-FileCopyrightText: 2016 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Gentoo Security Advisory GLSA 201312-15

Gentoo Linux Local Security Checks GLSA 201312-15 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

tinyproxy: denial of service

It was discovered that a remote attacker is able to cause a denial of service CPU and memory consumption via 1 a large number of headers or 2 a large number of forged headers that predictably trigger hash collisions...

tinyproxy tinyproxy 1.3.2/1.3.3 Heap Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2217/info Versions 1.3.2 and 1.3.3 of tinyproxy, a small HTTP proxy, exhibit a vulnerability to heap overflow attacks. A failure to properly validate user-supplied input which arguments a call to sprintf can allow...

openSUSE Security Update : tinyproxy (openSUSE-SU-2013:1201-1)

Tinyproxy allowed remote attackers to cause a denial of service CPU and memory consumption via 1 a large number of headers or 2 a large number of forged headers that trigger hash collisions predictably. bucket. This update fixes this by limiting headers and improving the hash keying. %NASLMINLEVE...

GLSA-201312-15 : Tinyproxy: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201312-15 Tinyproxy: Denial of Service A vulnerability has been discovered in the way how Tinyproxy works with headers. Impact : A remote attacker could send a specially crafted request with too many headers, possibly resulting in...

Tinyproxy: Denial of service

Background Tinyproxy is a light-weight HTTP/HTTPS proxy daemon for POSIX operating systems. Description A vulnerability has been discovered in the way how Tinyproxy works with headers. Impact A remote attacker could send a specially crafted request with too many headers, possibly resulting in a...

Fedora Update for tinyproxy FEDORA-2013-16225

Check for the Version of tinyproxy OpenVAS Vulnerability Test Fedora Update for tinyproxy FEDORA-2013-16225 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Fedora Update for tinyproxy FEDORA-2013-16225

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 20 Update: tinyproxy-1.8.3-1.fc20

tinyproxy is a small, efficient HTTP/SSL proxy daemon that is very useful i n a small network setting, where a larger proxy like Squid would either be too resource intensive, or a security risk...

Fedora 20 : tinyproxy-1.8.3-1.fc20 (2013-16165)

Update to upstream 1.83 - switch to using systemd macros in rpm - update to a PIE hardened build - update to use systemd Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

Fedora 19 : tinyproxy-1.8.3-1.fc19 (2013-16225)

Update to upstream 1.83 - switch to using systemd macros in rpm - update to a PIE hardened build - update to use systemd Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

[SECURITY] Fedora 19 Update: tinyproxy-1.8.3-1.fc19

tinyproxy is a small, efficient HTTP/SSL proxy daemon that is very useful i n a small network setting, where a larger proxy like Squid would either be too resource intensive, or a security risk...

Debian Security Advisory DSA 2564-1 (tinyproxy)

The remote host is missing an update to tinyproxy announced via advisory DSA 2564-1. OpenVAS Vulnerability Test $Id: deb25641.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2564-1 tinyproxy Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...