Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

squid squid 2.3 .stable4 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2005-0173
squid_ldap_auth in Squid 2.5 and previous versions allows remote authenticated users to bypass username-based Access Control Lists (ACLs) via a username with a space at the beginning or end, which is ignored by the LDAP server.
Squid Squid 2.1.patch2Squid Squid 2.1.pre1Squid Squid 2.2.pre2Squid Squid 2.2.stable1Squid Squid 2.3.stable2Squid Squid 2.3.stable3Squid Squid 2.4.stable6Squid Squid 2.4.stable7Squid Squid 2.0.patch2Squid Squid 2.0.pre1Squid Squid 2.1.releaseSquid Squid 2.2.devel3Squid Squid 2.2.stable4Squid Squid 2.2.stable5Squid Squid 2.4.stable1Squid Squid 2.4.stable2Squid Squid 2.5.stable3Squid Squid 2.5.stable4Squid Squid 2.0.releaseSquid Squid 2.1.patch1Squid Squid 2.2.devel4Squid Squid 2.2.pre1
10
CVSSv2
CVE-2005-0194
Squid 2.5, when processing the configuration file, parses empty Access Control Lists (ACLs), including proxy_auth ACLs without defined auth schemes, in a way that effectively removes arguments, which could allow remote malicious users to bypass intended ACLs if the administrator ...
Squid Squid 2.0.releaseSquid Squid 2.1.patch1Squid Squid 2.2.pre1Squid Squid 2.2.pre2Squid Squid 2.3.devel3Squid Squid 2.3.stable1Squid Squid 2.4.stable3Squid Squid 2.4.stable4Squid Squid 2.5.stable6Squid Squid 2.0.patch2Squid Squid 2.0.pre1Squid Squid 2.1.releaseSquid Squid 2.2.devel3Squid Squid 2.2.devel4Squid Squid 2.2.stable5Squid Squid 2.3.devel2Squid Squid 2.4.stable1Squid Squid 2.4.stable2Squid Squid 2.5.stable4Squid Squid 2.5.stable5Squid Squid 2.1.patch2Squid Squid 2.1.pre1
5
CVSSv2
CVE-2005-0446
Squid 2.5.STABLE8 and previous versions allows remote malicious users to cause a denial of service (crash) via certain DNS responses regarding (1) Fully Qualified Domain Names (FQDN) in fqdncache.c or (2) IP addresses in ipcache.c, which trigger an assertion failure.
Squid Squid 2.1.patch1Squid Squid 2.1.patch2Squid Squid 2.2.devel4Squid Squid 2.2.pre1Squid Squid 2.3.devel3Squid Squid 2.3.stable1Squid Squid 2.3 Stable5Squid Squid 2.4Squid Squid 2.4 .stable2Squid Squid 2.4 .stable6Squid Squid 2.4 .stable7Squid Squid 2.5.stable5Squid Squid 2.5.stable6Squid Squid 2.5 .stable6Squid Squid 2.5 Stable3Squid Squid 2.0.patch1Squid Squid 2.1.pre1Squid Squid 2.1.pre3Squid Squid 2.2.pre2Squid Squid 2.2.stable1Squid Squid 2.2.stable2Squid Squid 2.3.stable2
5
CVSSv2
CVE-2005-0718
Squid 2.5.STABLE7 and previous versions allows remote malicious users to cause a denial of service (segmentation fault) by aborting the connection during a (1) PUT or (2) POST request, which causes Squid to access previously freed memory.
Squid Squid 2.0.patch1Squid Squid 2.0.patch2Squid Squid 2.1.pre3Squid Squid 2.1.pre4Squid Squid 2.1.patch2Squid Squid 2.1.pre1Squid Squid 2.0.pre1Squid Squid 2.0.releaseSquid Squid 2.1.releaseSquid Squid 2.1 Patch2Squid Squid 2.2.stable4Squid Squid 2.2.stable5Squid Squid 2.3.stable5Squid Squid 2.3 .stable4Squid Squid 2.4.stable4Squid Squid 2.4.stable6Squid Squid 2.5.stable2Squid Squid 2.5.stable3Squid Squid 2.5 .stable4Squid Squid 2.5 .stable5Squid Squid 2.2.pre1Squid Squid 2.2.pre2
5
CVSSv2
CVE-2005-3258
The rfc1738_do_escape function in ftp.c for Squid 2.5 STABLE11 and previous versions allows remote FTP servers to cause a denial of service (segmentation fault) via certain "odd" responses.
Squid Squid 2.0.patch2Squid Squid 2.0.pre1Squid Squid 2.2.devel3Squid Squid 2.2.devel4Squid Squid 2.2.stable5Squid Squid 2.3.devel2Squid Squid 2.4Squid Squid 2.4.stable1Squid Squid 2.5.stable10Squid Squid 2.5.stable11Squid Squid 2.5.stable8Squid Squid 2.5.stable9Squid Squid 2.0.releaseSquid Squid 2.1.patch1Squid Squid 2.2.pre1Squid Squid 2.2.pre2Squid Squid 2.3.devel3Squid Squid 2.3.stable1Squid Squid 2.4.stable2Squid Squid 2.4.stable3Squid Squid 2.5.stable2Squid Squid 2.5.stable3
5
CVSSv2
CVE-2005-2794
store.c in Squid 2.5.STABLE10 and previous versions allows remote malicious users to cause a denial of service (crash) via certain aborted requests that trigger an assert error related to STORE_PENDING.
Squid Squid 2.0.releaseSquid Squid 2.1.patch1Squid Squid 2.2.devel4Squid Squid 2.2.pre1Squid Squid 2.3.devel3Squid Squid 2.1.patch2Squid Squid 2.1.pre1Squid Squid 2.2.pre2Squid Squid 2.2.stable1Squid Squid 2.2.stable2Squid Squid 2.3.stable2Squid Squid 2.3.stable3Squid Squid 2.4.stable6Squid Squid 2.4.stable7Squid Squid 2.5.stable7Squid Squid 2.5.stable8Squid Squid 2.0.patch1Squid Squid 2.1.pre3Squid Squid 2.1.pre4Squid Squid 2.2.stable3Squid Squid 2.2.stable4Squid Squid 2.3.stable4
5
CVSSv2
CVE-2005-2796
The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and previous versions allows remote malicious users to cause a denial of service (segmentation fault) via certain crafted requests.
Squid Squid 2.0 Patch2Squid Squid 2.1.patch1Squid Squid 2.2.devel3Squid Squid 2.2.devel4Squid Squid 2.3.devel2Squid Squid 2.3.devel3Squid Squid 2.3 .stable5Squid Squid 2.3 Stable5Squid Squid 2.4.stable7Squid Squid 2.4 .stable2Squid Squid 2.5.stable3Squid Squid 2.5.stable4Squid Squid 2.5 .stable3Squid Squid 2.5 .stable4Squid Squid 2.1.patch2Squid Squid 2.1.pre1Squid Squid 2.2.pre1Squid Squid 2.2.pre2Squid Squid 2.3.stable1Squid Squid 2.3.stable2Squid Squid 2.4Squid Squid 2.4.stable1
5
CVSSv2
CVE-2007-6239
The "cache update reply processing" functionality in Squid 2.x prior to 2.6.STABLE17 and Squid 3.0 allows remote malicious users to cause a denial of service (crash) via unknown vectors related to HTTP headers and an Array memory leak during requests for cached objects.
Squid Squid Web Proxy Cache 2.0 Patch2Squid Squid Web Proxy Cache 2.1 Patch2Squid Squid Web Proxy Cache 2.5.stable11Squid Squid Web Proxy Cache 2.5.stable12Squid Squid Web Proxy Cache 2.5 Stable4Squid Squid Web Proxy Cache 2.5 Stable5Squid Squid Web Proxy Cache 2.6.stable14Squid Squid Web Proxy Cache 2.6.stable15Squid Squid Web Proxy Cache 2.6.stable7Squid Squid Web Proxy Cache 3.0Squid Squid Web Proxy Cache 2.4 Stable2Squid Squid Web Proxy Cache 2.4 Stable4Squid Squid Web Proxy Cache 2.5 .stable9Squid Squid Web Proxy Cache 2.5 Stable1Squid Squid Web Proxy Cache 2.5 Stable8Squid Squid Web Proxy Cache 2.6Squid Squid Web Proxy Cache 2.6.stable1Squid Squid Web Proxy Cache 2.6.stable3Squid Squid Web Proxy Cache 2.6.stable4Squid Squid Web Proxy Cache 3.0 Pre3Squid Squid Web Proxy Cache 2.3.stable4Squid Squid Web Proxy Cache 2.3.stable5
5
CVSSv2
CVE-2010-0639
The htcpHandleTstRequest function in htcp.c in Squid 2.x prior to 2.6.STABLE24 and 2.7 prior to 2.7.STABLE8, and htcp.cc in 3.0 prior to 3.0.STABLE24, allows remote malicious users to cause a denial of service (NULL pointer dereference and daemon crash) via crafted packets to the...
Squid-cache Squid 2.6Squid-cache Squid 2.7Squid-cache Squid 2.1Squid-cache Squid 3.0.stable2Squid-cache Squid 3.0.stable20Squid-cache Squid 3.0.stable21Squid-cache Squid 3.0.stable22Squid-cache Squid 3.0.stable11Squid-cache Squid 3.0.stable12Squid-cache Squid 3.0.stable13Squid-cache Squid 3.0.stable14Squid-cache Squid 3.0.stable15Squid-cache Squid 3.0.stable7Squid-cache Squid 3.0.stable8Squid-cache Squid 3.0.stable9Squid-cache Squid 3.0.stable23Squid-cache Squid 2.0Squid-cache Squid 2.5Squid-cache Squid 2.2Squid-cache Squid 3.0Squid-cache Squid 3.0.stable16Squid-cache Squid 3.0.stable18
4
CVSSv2
CVE-2010-0308
lib/rfc1035.c in Squid 2.x, 3.0 up to and including 3.0.STABLE22, and 3.1 up to and including 3.1.0.15 allows remote malicious users to cause a denial of service (assertion failure) via a crafted DNS packet that only contains a header.
Squid-cache Squid 3.0Squid-cache Squid 2.6Squid-cache Squid 2.7Squid-cache Squid 3.1.0.6Squid-cache Squid 3.1.0.7Squid-cache Squid 3.1.0.11Squid-cache Squid 3.0.stable22Squid-cache Squid 3.0.stable15Squid-cache Squid 3.0.stable14Squid-cache Squid 3.0.stable6Squid-cache Squid 3.0.stable5Squid-cache Squid 2.1Squid-cache Squid 2.0Squid-cache Squid 3.1Squid-cache Squid 3.1.0.1Squid-cache Squid 3.1.0.8Squid-cache Squid 3.1.0.9Squid-cache Squid 3.1.0.10Squid-cache Squid 3.0.stable21Squid-cache Squid 3.0.stable20Squid-cache Squid 3.0.stable13Squid-cache Squid 3.0.stable12
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322CVE-2006-4304wirelessCVE-2023-23022local file inclusionCVE-2024-27058CVE-2024-33820open redirectCVE-2024-27079
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook