124 results · Feed
-
Unscored —CVE-2014-6270 EPSS 23%
Off-by-one error in the snmpHandleUdp function in snmp_core.cc in Squid 2.x and 3.x, when an SNMP port is configured, a…
-
Unscored —CVE-2014-3609 EPSS 56%
HttpHdrRange.cc in Squid 3.x before 3.3.12 and 3.4.x before 3.4.6 allows remote attackers to cause a denial of service …
-
Unscored —CVE-2013-0189 EPSS 22%
cachemgr.cgi in Squid 3.1.x and 3.2.x, possibly 3.1.22, 3.2.4, and other versions, allows remote attackers to cause a d…
-
Unscored —CVE-2012-5643 EPSS 23%
Multiple memory leaks in tools/cachemgr.cc in cachemgr.cgi in Squid 2.x and 3.x before 3.1.22, 3.2.x before 3.2.4, and …
-
Unscored —CVE-2010-0639 EPSS 31%
The htcpHandleTstRequest function in htcp.c in Squid 2.x before 2.6.STABLE24 and 2.7 before 2.7.STABLE8, and htcp.cc in…
-
Unscored —CVE-2010-0308 EPSS 28%
lib/rfc1035.c in Squid 2.x, 3.0 through 3.0.STABLE22, and 3.1 through 3.1.0.15 allows remote attackers to cause a denia…
-
Unscored —CVE-2009-2855 EPSS 34%
The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers to cause a denial of service …
-
Unscored —
Squid, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which…
-
Unscored —
Squid 2.7 to 2.7.STABLE5, 3.0 to 3.0.STABLE12, and 3.1 to 3.1.0.4 allows remote attackers to cause a denial of service …
-
Unscored —
The arrayShrink function (lib/Array.c) in Squid 2.6.STABLE17 allows attackers to cause a denial of service (process exi…
-
Unscored —CVE-2007-6239 EPSS 27%
The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0 allows remote attacker…
-
Unscored —CVE-2007-1560 EPSS 28%
The clientProcessRequest() function in src/client_side.c in Squid 2.6 before 2.6.STABLE12 allows remote attackers to ca…
-
Unscored —
squid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of service (core dump) via craf…
-
Unscored —
The aclMatchExternal function in Squid before 2.6.STABLE7 allows remote attackers to cause a denial of service (crash) …
-
Unscored —
The clientAbortBody function in client_side.c in Squid Web Proxy Cache before 2.6 STABLE6 allows remote attackers to ca…
-
Unscored —
Squid 2.5.STABLE10 and earlier, while performing NTLM authentication, does not properly handle certain request sequence…
-
Unscored —
store.c in Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (crash) via certain abor…
-
Unscored —
The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of…
-
Unscored —
Squid Web Proxy Cache 2.5 might allow remote attackers to obtain sensitive information via URLs containing invalid host…
-
Unscored —CVE-2004-2480 Public exploit
Squid Web Proxy Cache 2.3.STABLE5 allows remote attackers to bypass security controls and access arbitrary websites via…
-
Unscored —
Squid 2.5 STABLE9 and earlier, when the DNS client port is unfiltered and the environment does not prevent IP spoofing,…
-
Unscored —
Squid 2.5.STABLE9 and earlier does not trigger a fatal error when it identifies missing or invalid ACLs in the http_acc…
-
Unscored —CVE-2005-0718 EPSS 13%
Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (segmentation fault) by aborting the…
-
Unscored —
Race condition in Squid 2.5.STABLE7 to 2.5.STABLE9, when using the Netscape Set-Cookie recommendations for handling coo…
-
Unscored —CVE-2005-0446 EPSS 41%
Squid 2.5.STABLE8 and earlier allows remote attackers to cause a denial of service (crash) via certain DNS responses re…
-
Unscored —CVE-2005-0241 EPSS 70%
The httpProcessReplyHeader function in http.c for Squid 2.5-STABLE7 and earlier does not properly set the debug context…
-
Unscored —CVE-2005-0175 EPSS 41%
Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache via an HTTP response splitting attack.
-
Unscored —
Squid 2.5, when processing the configuration file, parses empty Access Control Lists (ACLs), including proxy_auth ACLs …
-
Unscored —CVE-2005-0174 EPSS 50%
Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or conduct certain attacks via headers that do …
-
Unscored —CVE-2005-0173 EPSS 32%
squid_ldap_auth in Squid 2.5 and earlier allows remote authenticated users to bypass username-based Access Control List…
-
Unscored —CVE-2005-0211 EPSS 22%
Buffer overflow in wccp.c in Squid 2.5 before 2.5.STABLE7 allows remote attackers to cause a denial of service and poss…
-
Unscored —CVE-2005-0097 EPSS 11%
The NTLM component in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via a …
-
Unscored —CVE-2005-0095 EPSS 69%
The WCCP message parsing code in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (cr…
-
Unscored —
Memory leak in the NTLM fakeauth_auth helper for Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denia…
-
Unscored —
Buffer overflow in the gopherToHTML function in the Gopher reply parser for Squid 2.5.STABLE7 and earlier allows remote…
-
Unscored —CVE-2004-0918 EPSS 16%
The asn_parse_header function (asn1.c) in the SNMP module for Squid Web Proxy Cache before 2.4.STABLE7 allows remote at…
-
Unscored —CVE-2004-0832 EPSS 10%
The (1) ntlm_fetch_string and (2) ntlm_get_string functions in Squid 2.5.6 and earlier, with NTLM authentication enable…
-
Unscored —
The "%xx" URL decoding function in Squid 2.5STABLE4 and earlier allows remote attackers to bypass url_regex ACLs via a …
-
Unscored —
Buffer overflow in the ntlm_check_auth (NTLM authentication) function for Squid Web Proxy Cache 2.5.x and 3.x, when com…
-
Unscored —
FTP proxy in Squid before 2.4.STABLE6 does not compare the IP addresses of control and data connections with the FTP se…