Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

squid squid 2.4 stable7 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2005-0446
Squid 2.5.STABLE8 and previous versions allows remote malicious users to cause a denial of service (crash) via certain DNS responses regarding (1) Fully Qualified Domain Names (FQDN) in fqdncache.c or (2) IP addresses in ipcache.c, which trigger an assertion failure.
Squid Squid 2.1.patch1Squid Squid 2.1.patch2Squid Squid 2.2.devel4Squid Squid 2.2.pre1Squid Squid 2.3.devel3Squid Squid 2.3.stable1Squid Squid 2.3 Stable5Squid Squid 2.4Squid Squid 2.4 .stable2Squid Squid 2.4 .stable6Squid Squid 2.4 .stable7Squid Squid 2.5.stable5Squid Squid 2.5.stable6Squid Squid 2.5 .stable6Squid Squid 2.5 Stable3Squid Squid 2.0.patch1Squid Squid 2.1.pre1Squid Squid 2.1.pre3Squid Squid 2.2.pre2Squid Squid 2.2.stable1Squid Squid 2.2.stable2Squid Squid 2.3.stable2
NA
CVE-2005-3258
The rfc1738_do_escape function in ftp.c for Squid 2.5 STABLE11 and previous versions allows remote FTP servers to cause a denial of service (segmentation fault) via certain "odd" responses.
Squid Squid 2.0.patch2Squid Squid 2.0.pre1Squid Squid 2.2.devel3Squid Squid 2.2.devel4Squid Squid 2.2.stable5Squid Squid 2.3.devel2Squid Squid 2.4Squid Squid 2.4.stable1Squid Squid 2.5.stable10Squid Squid 2.5.stable11Squid Squid 2.5.stable8Squid Squid 2.5.stable9Squid Squid 2.0.releaseSquid Squid 2.1.patch1Squid Squid 2.2.pre1Squid Squid 2.2.pre2Squid Squid 2.3.devel3Squid Squid 2.3.stable1Squid Squid 2.4.stable2Squid Squid 2.4.stable3Squid Squid 2.5.stable2Squid Squid 2.5.stable3
NA
CVE-2005-0718
Squid 2.5.STABLE7 and previous versions allows remote malicious users to cause a denial of service (segmentation fault) by aborting the connection during a (1) PUT or (2) POST request, which causes Squid to access previously freed memory.
Squid Squid 2.0.patch1Squid Squid 2.0.patch2Squid Squid 2.1.pre3Squid Squid 2.1.pre4Squid Squid 2.1.patch2Squid Squid 2.1.pre1Squid Squid 2.0.pre1Squid Squid 2.0.releaseSquid Squid 2.1.releaseSquid Squid 2.1 Patch2Squid Squid 2.2.stable4Squid Squid 2.2.stable5Squid Squid 2.3.stable5Squid Squid 2.3 .stable4Squid Squid 2.4.stable4Squid Squid 2.4.stable6Squid Squid 2.5.stable2Squid Squid 2.5.stable3Squid Squid 2.5 .stable4Squid Squid 2.5 .stable5Squid Squid 2.2.pre1Squid Squid 2.2.pre2
NA
CVE-2005-2796
The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and previous versions allows remote malicious users to cause a denial of service (segmentation fault) via certain crafted requests.
Squid Squid 2.0 Patch2Squid Squid 2.1.patch1Squid Squid 2.2.devel3Squid Squid 2.2.devel4Squid Squid 2.3.devel2Squid Squid 2.3.devel3Squid Squid 2.3 .stable5Squid Squid 2.3 Stable5Squid Squid 2.4.stable7Squid Squid 2.4 .stable2Squid Squid 2.5.stable3Squid Squid 2.5.stable4Squid Squid 2.5 .stable3Squid Squid 2.5 .stable4Squid Squid 2.1.patch2Squid Squid 2.1.pre1Squid Squid 2.2.pre1Squid Squid 2.2.pre2Squid Squid 2.3.stable1Squid Squid 2.3.stable2Squid Squid 2.4Squid Squid 2.4.stable1
NA
CVE-2005-2794
store.c in Squid 2.5.STABLE10 and previous versions allows remote malicious users to cause a denial of service (crash) via certain aborted requests that trigger an assert error related to STORE_PENDING.
Squid Squid 2.0.releaseSquid Squid 2.1.patch1Squid Squid 2.2.devel4Squid Squid 2.2.pre1Squid Squid 2.3.devel3Squid Squid 2.1.patch2Squid Squid 2.1.pre1Squid Squid 2.2.pre2Squid Squid 2.2.stable1Squid Squid 2.2.stable2Squid Squid 2.3.stable2Squid Squid 2.3.stable3Squid Squid 2.4.stable6Squid Squid 2.4.stable7Squid Squid 2.5.stable7Squid Squid 2.5.stable8Squid Squid 2.0.patch1Squid Squid 2.1.pre3Squid Squid 2.1.pre4Squid Squid 2.2.stable3Squid Squid 2.2.stable4Squid Squid 2.3.stable4
NA
CVE-2005-0094
Buffer overflow in the gopherToHTML function in the Gopher reply parser for Squid 2.5.STABLE7 and previous versions allows remote malicious Gopher servers to cause a denial of service (crash) via crafted responses.
Squid Squid 2.3 Stable5Squid Squid 2.4Squid Squid 2.5.stable2Squid Squid 2.5.stable3Squid Squid 2.5 .stable5Squid Squid 2.5 .stable6Squid Squid 2.4 .stable2Squid Squid 2.4 .stable6Squid Squid 2.5.stable4Squid Squid 2.5.stable5Squid Squid 2.5 Stable3Squid Squid 2.5 Stable4Squid Squid 2.0 Patch2Squid Squid 2.1 Patch2Squid Squid 2.4 .stable7Squid Squid 2.4 Stable7Squid Squid 2.5.stable6Squid Squid 2.5.stable7Squid Squid 2.5 Stable9Squid Squid 2.6.stable1Squid Squid 2.3 .stable4Squid Squid 2.3 .stable5
NA
CVE-2005-0095
The WCCP message parsing code in Squid 2.5.STABLE7 and previous versions allows remote malicious users to cause a denial of service (crash) via malformed WCCP messages with source addresses that are spoofed to reference Squid's home router and invalid WCCP_I_SEE_YOU cache nu...
Squid Squid 2.1 Patch2Squid Squid 2.3 .stable4Squid Squid 2.4 Stable7Squid Squid 2.5.6Squid Squid 2.5 .stable1Squid Squid 2.5 .stable3Squid Squid 2.6.stable1Squid Squid 2.3 .stable5Squid Squid 2.3 Stable5Squid Squid 2.5.stable1Squid Squid 2.5.stable2Squid Squid 2.5 .stable4Squid Squid 2.5 .stable5Squid Squid 2.4Squid Squid 2.4 .stable2Squid Squid 2.5.stable3Squid Squid 2.5.stable4Squid Squid 2.5.stable5Squid Squid 2.5 .stable6Squid Squid 2.5 Stable3Squid Squid 2.0 Patch2Squid Squid 2.4 .stable6
NA
CVE-2005-0096
Memory leak in the NTLM fakeauth_auth helper for Squid 2.5.STABLE7 and previous versions allows remote malicious users to cause a denial of service (memory consumption).
Squid Squid 2.4 .stable2Squid Squid 2.4 .stable6Squid Squid 2.5.stable5Squid Squid 2.5.stable6Squid Squid 2.5 Stable3Squid Squid 2.5 Stable4Squid Squid 2.0 Patch2Squid Squid 2.1 Patch2Squid Squid 2.4 .stable7Squid Squid 2.4 Stable7Squid Squid 2.5.6Squid Squid 2.5.stable7Squid Squid 2.5 .stable1Squid Squid 2.5 Stable9Squid Squid 2.6.stable1Squid Squid 2.3 .stable4Squid Squid 2.3 .stable5Squid Squid 2.5.stable1Squid Squid 2.5.stable2Squid Squid 2.5 .stable3Squid Squid 2.5 .stable4Squid Squid 2.3 Stable5
NA
CVE-2005-0097
The NTLM component in Squid 2.5.STABLE7 and previous versions allows remote malicious users to cause a denial of service (crash) via a malformed NTLM type 3 message that triggers a NULL dereference.
Squid Squid 2.3 .stable5Squid Squid 2.3 Stable5Squid Squid 2.5.stable2Squid Squid 2.5.stable3Squid Squid 2.5 .stable4Squid Squid 2.5 .stable5Squid Squid 2.4Squid Squid 2.4 .stable2Squid Squid 2.4 .stable6Squid Squid 2.5.stable4Squid Squid 2.5.stable5Squid Squid 2.5 .stable6Squid Squid 2.5 Stable3Squid Squid 2.0 Patch2Squid Squid 2.4 .stable7Squid Squid 2.4 Stable7Squid Squid 2.5.stable6Squid Squid 2.5.stable7Squid Squid 2.5 Stable4Squid Squid 2.5 Stable9Squid Squid 2.1 Patch2Squid Squid 2.3 .stable4
NA
CVE-2005-0194
Squid 2.5, when processing the configuration file, parses empty Access Control Lists (ACLs), including proxy_auth ACLs without defined auth schemes, in a way that effectively removes arguments, which could allow remote malicious users to bypass intended ACLs if the administrator ...
Squid Squid 2.0.releaseSquid Squid 2.1.patch1Squid Squid 2.2.pre1Squid Squid 2.2.pre2Squid Squid 2.3.devel3Squid Squid 2.3.stable1Squid Squid 2.4.stable3Squid Squid 2.4.stable4Squid Squid 2.5.stable6Squid Squid 2.0.patch2Squid Squid 2.0.pre1Squid Squid 2.1.releaseSquid Squid 2.2.devel3Squid Squid 2.2.devel4Squid Squid 2.2.stable5Squid Squid 2.3.devel2Squid Squid 2.4.stable1Squid Squid 2.4.stable2Squid Squid 2.5.stable4Squid Squid 2.5.stable5Squid Squid 2.1.patch2Squid Squid 2.1.pre1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
hard-codedCVE-2024-27202NULL pointer dereferenceCVE-2024-28075CVE-2024-33608CVE-2024-28889CVE-2024-34572template injectionCVE-2024-34351
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook