Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

squid squid 2.4.stable6 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2005-0173
squid_ldap_auth in Squid 2.5 and previous versions allows remote authenticated users to bypass username-based Access Control Lists (ACLs) via a username with a space at the beginning or end, which is ignored by the LDAP server.
Squid Squid 2.1.patch2Squid Squid 2.1.pre1Squid Squid 2.2.pre2Squid Squid 2.2.stable1Squid Squid 2.3.stable2Squid Squid 2.3.stable3Squid Squid 2.4.stable6Squid Squid 2.4.stable7Squid Squid 2.0.patch2Squid Squid 2.0.pre1Squid Squid 2.1.releaseSquid Squid 2.2.devel3Squid Squid 2.2.stable4Squid Squid 2.2.stable5Squid Squid 2.4.stable1Squid Squid 2.4.stable2Squid Squid 2.5.stable3Squid Squid 2.5.stable4Squid Squid 2.0.releaseSquid Squid 2.1.patch1Squid Squid 2.2.devel4Squid Squid 2.2.pre1
10
CVSSv2
CVE-2005-0194
Squid 2.5, when processing the configuration file, parses empty Access Control Lists (ACLs), including proxy_auth ACLs without defined auth schemes, in a way that effectively removes arguments, which could allow remote malicious users to bypass intended ACLs if the administrator ...
Squid Squid 2.0.releaseSquid Squid 2.1.patch1Squid Squid 2.2.pre1Squid Squid 2.2.pre2Squid Squid 2.3.devel3Squid Squid 2.3.stable1Squid Squid 2.4.stable3Squid Squid 2.4.stable4Squid Squid 2.5.stable6Squid Squid 2.0.patch2Squid Squid 2.0.pre1Squid Squid 2.1.releaseSquid Squid 2.2.devel3Squid Squid 2.2.devel4Squid Squid 2.2.stable5Squid Squid 2.3.devel2Squid Squid 2.4.stable1Squid Squid 2.4.stable2Squid Squid 2.5.stable4Squid Squid 2.5.stable5Squid Squid 2.1.patch2Squid Squid 2.1.pre1
5
CVSSv2
CVE-2005-3258
The rfc1738_do_escape function in ftp.c for Squid 2.5 STABLE11 and previous versions allows remote FTP servers to cause a denial of service (segmentation fault) via certain "odd" responses.
Squid Squid 2.0.patch2Squid Squid 2.0.pre1Squid Squid 2.2.devel3Squid Squid 2.2.devel4Squid Squid 2.2.stable5Squid Squid 2.3.devel2Squid Squid 2.4Squid Squid 2.4.stable1Squid Squid 2.5.stable10Squid Squid 2.5.stable11Squid Squid 2.5.stable8Squid Squid 2.5.stable9Squid Squid 2.0.releaseSquid Squid 2.1.patch1Squid Squid 2.2.pre1Squid Squid 2.2.pre2Squid Squid 2.3.devel3Squid Squid 2.3.stable1Squid Squid 2.4.stable2Squid Squid 2.4.stable3Squid Squid 2.5.stable2Squid Squid 2.5.stable3
5
CVSSv2
CVE-2005-2794
store.c in Squid 2.5.STABLE10 and previous versions allows remote malicious users to cause a denial of service (crash) via certain aborted requests that trigger an assert error related to STORE_PENDING.
Squid Squid 2.0.releaseSquid Squid 2.1.patch1Squid Squid 2.2.devel4Squid Squid 2.2.pre1Squid Squid 2.3.devel3Squid Squid 2.1.patch2Squid Squid 2.1.pre1Squid Squid 2.2.pre2Squid Squid 2.2.stable1Squid Squid 2.2.stable2Squid Squid 2.3.stable2Squid Squid 2.3.stable3Squid Squid 2.4.stable6Squid Squid 2.4.stable7Squid Squid 2.5.stable7Squid Squid 2.5.stable8Squid Squid 2.0.patch1Squid Squid 2.1.pre3Squid Squid 2.1.pre4Squid Squid 2.2.stable3Squid Squid 2.2.stable4Squid Squid 2.3.stable4
5
CVSSv2
CVE-2005-0446
Squid 2.5.STABLE8 and previous versions allows remote malicious users to cause a denial of service (crash) via certain DNS responses regarding (1) Fully Qualified Domain Names (FQDN) in fqdncache.c or (2) IP addresses in ipcache.c, which trigger an assertion failure.
Squid Squid 2.1.patch1Squid Squid 2.1.patch2Squid Squid 2.2.devel4Squid Squid 2.2.pre1Squid Squid 2.3.devel3Squid Squid 2.3.stable1Squid Squid 2.3 Stable5Squid Squid 2.4Squid Squid 2.4 .stable2Squid Squid 2.4 .stable6Squid Squid 2.4 .stable7Squid Squid 2.5.stable5Squid Squid 2.5.stable6Squid Squid 2.5 .stable6Squid Squid 2.5 Stable3Squid Squid 2.0.patch1Squid Squid 2.1.pre1Squid Squid 2.1.pre3Squid Squid 2.2.pre2Squid Squid 2.2.stable1Squid Squid 2.2.stable2Squid Squid 2.3.stable2
5
CVSSv2
CVE-2005-0718
Squid 2.5.STABLE7 and previous versions allows remote malicious users to cause a denial of service (segmentation fault) by aborting the connection during a (1) PUT or (2) POST request, which causes Squid to access previously freed memory.
Squid Squid 2.0.patch1Squid Squid 2.0.patch2Squid Squid 2.1.pre3Squid Squid 2.1.pre4Squid Squid 2.1.patch2Squid Squid 2.1.pre1Squid Squid 2.0.pre1Squid Squid 2.0.releaseSquid Squid 2.1.releaseSquid Squid 2.1 Patch2Squid Squid 2.2.stable4Squid Squid 2.2.stable5Squid Squid 2.3.stable5Squid Squid 2.3 .stable4Squid Squid 2.4.stable4Squid Squid 2.4.stable6Squid Squid 2.5.stable2Squid Squid 2.5.stable3Squid Squid 2.5 .stable4Squid Squid 2.5 .stable5Squid Squid 2.2.pre1Squid Squid 2.2.pre2
5
CVSSv2
CVE-2005-2796
The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and previous versions allows remote malicious users to cause a denial of service (segmentation fault) via certain crafted requests.
Squid Squid 2.0 Patch2Squid Squid 2.1.patch1Squid Squid 2.2.devel3Squid Squid 2.2.devel4Squid Squid 2.3.devel2Squid Squid 2.3.devel3Squid Squid 2.3 .stable5Squid Squid 2.3 Stable5Squid Squid 2.4.stable7Squid Squid 2.4 .stable2Squid Squid 2.5.stable3Squid Squid 2.5.stable4Squid Squid 2.5 .stable3Squid Squid 2.5 .stable4Squid Squid 2.1.patch2Squid Squid 2.1.pre1Squid Squid 2.2.pre1Squid Squid 2.2.pre2Squid Squid 2.3.stable1Squid Squid 2.3.stable2Squid Squid 2.4Squid Squid 2.4.stable1
5
CVSSv2
CVE-2002-0715
Vulnerability in Squid prior to 2.4.STABLE6 related to proxy authentication credentials may allow remote web sites to obtain the user's proxy login and password.
Squid Squid
7.5
CVSSv2
CVE-2002-0714
FTP proxy in Squid prior to 2.4.STABLE6 does not compare the IP addresses of control and data connections with the FTP server, which allows remote malicious users to bypass firewall rules or spoof FTP server responses.
Squid Squid
7.5
CVSSv2
CVE-2002-0713
Buffer overflows in Squid prior to 2.4.STABLE6 allow remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code (1) via the MSNT auth helper (msnt_auth) when using denyusers or allowusers files, (2) via the gopher client, or (3) via the FTP se...
Squid Squid
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3581reflected XSSCVE-2024-26925CVE-2024-27956LFICVE-2024-3607CVE-2024-3107CVE-2024-3295SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook