Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

squid squid 2.4.stable7 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2005-0173
squid_ldap_auth in Squid 2.5 and previous versions allows remote authenticated users to bypass username-based Access Control Lists (ACLs) via a username with a space at the beginning or end, which is ignored by the LDAP server.
Squid Squid 2.1.patch2Squid Squid 2.1.pre1Squid Squid 2.2.pre2Squid Squid 2.2.stable1Squid Squid 2.3.stable2Squid Squid 2.3.stable3Squid Squid 2.4.stable6Squid Squid 2.4.stable7Squid Squid 2.0.patch2Squid Squid 2.0.pre1Squid Squid 2.1.releaseSquid Squid 2.2.devel3Squid Squid 2.2.stable4Squid Squid 2.2.stable5Squid Squid 2.4.stable1Squid Squid 2.4.stable2Squid Squid 2.5.stable3Squid Squid 2.5.stable4Squid Squid 2.0.releaseSquid Squid 2.1.patch1Squid Squid 2.2.devel4Squid Squid 2.2.pre1
10
CVSSv2
CVE-2005-0194
Squid 2.5, when processing the configuration file, parses empty Access Control Lists (ACLs), including proxy_auth ACLs without defined auth schemes, in a way that effectively removes arguments, which could allow remote malicious users to bypass intended ACLs if the administrator ...
Squid Squid 2.0.releaseSquid Squid 2.1.patch1Squid Squid 2.2.pre1Squid Squid 2.2.pre2Squid Squid 2.3.devel3Squid Squid 2.3.stable1Squid Squid 2.4.stable3Squid Squid 2.4.stable4Squid Squid 2.5.stable6Squid Squid 2.0.patch2Squid Squid 2.0.pre1Squid Squid 2.1.releaseSquid Squid 2.2.devel3Squid Squid 2.2.devel4Squid Squid 2.2.stable5Squid Squid 2.3.devel2Squid Squid 2.4.stable1Squid Squid 2.4.stable2Squid Squid 2.5.stable4Squid Squid 2.5.stable5Squid Squid 2.1.patch2Squid Squid 2.1.pre1
5
CVSSv2
CVE-2005-3258
The rfc1738_do_escape function in ftp.c for Squid 2.5 STABLE11 and previous versions allows remote FTP servers to cause a denial of service (segmentation fault) via certain "odd" responses.
Squid Squid 2.0.patch2Squid Squid 2.0.pre1Squid Squid 2.2.devel3Squid Squid 2.2.devel4Squid Squid 2.2.stable5Squid Squid 2.3.devel2Squid Squid 2.4Squid Squid 2.4.stable1Squid Squid 2.5.stable10Squid Squid 2.5.stable11Squid Squid 2.5.stable8Squid Squid 2.5.stable9Squid Squid 2.0.releaseSquid Squid 2.1.patch1Squid Squid 2.2.pre1Squid Squid 2.2.pre2Squid Squid 2.3.devel3Squid Squid 2.3.stable1Squid Squid 2.4.stable2Squid Squid 2.4.stable3Squid Squid 2.5.stable2Squid Squid 2.5.stable3
5
CVSSv2
CVE-2005-2794
store.c in Squid 2.5.STABLE10 and previous versions allows remote malicious users to cause a denial of service (crash) via certain aborted requests that trigger an assert error related to STORE_PENDING.
Squid Squid 2.0.releaseSquid Squid 2.1.patch1Squid Squid 2.2.devel4Squid Squid 2.2.pre1Squid Squid 2.3.devel3Squid Squid 2.1.patch2Squid Squid 2.1.pre1Squid Squid 2.2.pre2Squid Squid 2.2.stable1Squid Squid 2.2.stable2Squid Squid 2.3.stable2Squid Squid 2.3.stable3Squid Squid 2.4.stable6Squid Squid 2.4.stable7Squid Squid 2.5.stable7Squid Squid 2.5.stable8Squid Squid 2.0.patch1Squid Squid 2.1.pre3Squid Squid 2.1.pre4Squid Squid 2.2.stable3Squid Squid 2.2.stable4Squid Squid 2.3.stable4
7.5
CVSSv2
CVE-2004-0189
The "%xx" URL decoding function in Squid 2.5STABLE4 and previous versions allows remote malicious users to bypass url_regex ACLs via a URL with a NULL ("%00") character, which causes Squid to use only a portion of the requested URL when comparing it against th...
Squid Squid 2.4 Stable7Squid Squid 2.5 Stable3Squid Squid 2.0 Patch2Squid Squid 2.1 Patch2Squid Squid 2.3 Stable5Squid Squid 2.4Squid Squid 2.5 Stable4
5
CVSSv2
CVE-2005-0446
Squid 2.5.STABLE8 and previous versions allows remote malicious users to cause a denial of service (crash) via certain DNS responses regarding (1) Fully Qualified Domain Names (FQDN) in fqdncache.c or (2) IP addresses in ipcache.c, which trigger an assertion failure.
Squid Squid 2.1.patch1Squid Squid 2.1.patch2Squid Squid 2.2.devel4Squid Squid 2.2.pre1Squid Squid 2.3.devel3Squid Squid 2.3.stable1Squid Squid 2.3 Stable5Squid Squid 2.4Squid Squid 2.4 .stable2Squid Squid 2.4 .stable6Squid Squid 2.4 .stable7Squid Squid 2.5.stable5Squid Squid 2.5.stable6Squid Squid 2.5 .stable6Squid Squid 2.5 Stable3Squid Squid 2.0.patch1Squid Squid 2.1.pre1Squid Squid 2.1.pre3Squid Squid 2.2.pre2Squid Squid 2.2.stable1Squid Squid 2.2.stable2Squid Squid 2.3.stable2
5
CVSSv2
CVE-2005-0718
Squid 2.5.STABLE7 and previous versions allows remote malicious users to cause a denial of service (segmentation fault) by aborting the connection during a (1) PUT or (2) POST request, which causes Squid to access previously freed memory.
Squid Squid 2.0.patch1Squid Squid 2.0.patch2Squid Squid 2.1.pre3Squid Squid 2.1.pre4Squid Squid 2.1.patch2Squid Squid 2.1.pre1Squid Squid 2.0.pre1Squid Squid 2.0.releaseSquid Squid 2.1.releaseSquid Squid 2.1 Patch2Squid Squid 2.2.stable4Squid Squid 2.2.stable5Squid Squid 2.3.stable5Squid Squid 2.3 .stable4Squid Squid 2.4.stable4Squid Squid 2.4.stable6Squid Squid 2.5.stable2Squid Squid 2.5.stable3Squid Squid 2.5 .stable4Squid Squid 2.5 .stable5Squid Squid 2.2.pre1Squid Squid 2.2.pre2
5
CVSSv2
CVE-2005-2796
The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and previous versions allows remote malicious users to cause a denial of service (segmentation fault) via certain crafted requests.
Squid Squid 2.0 Patch2Squid Squid 2.1.patch1Squid Squid 2.2.devel3Squid Squid 2.2.devel4Squid Squid 2.3.devel2Squid Squid 2.3.devel3Squid Squid 2.3 .stable5Squid Squid 2.3 Stable5Squid Squid 2.4.stable7Squid Squid 2.4 .stable2Squid Squid 2.5.stable3Squid Squid 2.5.stable4Squid Squid 2.5 .stable3Squid Squid 2.5 .stable4Squid Squid 2.1.patch2Squid Squid 2.1.pre1Squid Squid 2.2.pre1Squid Squid 2.2.pre2Squid Squid 2.3.stable1Squid Squid 2.3.stable2Squid Squid 2.4Squid Squid 2.4.stable1
5
CVSSv2
CVE-2004-0918
The asn_parse_header function (asn1.c) in the SNMP module for Squid Web Proxy Cache prior to 2.4.STABLE7 allows remote malicious users to cause a denial of service (server restart) via certain SNMP packets with negative length fields that trigger a memory allocation error.
Openpkg Openpkg 2.1Openpkg Openpkg 2.2Squid Squid 2.4 .stable2Squid Squid 2.4 .stable6Squid Squid 3.0 Pre2Squid Squid 3.0 Pre3Openpkg Openpkg CurrentSquid Squid 2.0 Patch2Squid Squid 2.4 .stable7Squid Squid 2.5 .stable1Squid Squid 2.5 .stable3Squid Squid 2.3 .stable5Squid Squid 2.4Squid Squid 2.5 .stable6Squid Squid 3.0 Pre1Squid Squid 2.1 Patch2Squid Squid 2.3 .stable4Squid Squid 2.5 .stable4Squid Squid 2.5 .stable5Ubuntu Ubuntu Linux 4.1Gentoo LinuxTrustix Secure Linux 2.0
6.8
CVSSv2
CVE-2014-6270
Off-by-one error in the snmpHandleUdp function in snmp_core.cc in Squid 2.x and 3.x, when an SNMP port is configured, allows remote malicious users to cause a denial of service (crash) or possibly execute arbitrary code via a crafted UDP SNMP request, which triggers a heap-based ...
Squid-cache Squid 2.7.stable2Squid-cache Squid 2.7.stable3Squid-cache Squid 2.7.stable1Squid-cache Squid 2.7.stable8Squid-cache Squid 2.7.stable9Squid-cache Squid 2.6.stable8Squid-cache Squid 2.6.stable9Squid-cache Squid 2.6.stable16Squid-cache Squid 2.6.stable17Squid-cache Squid 2.5.stable1Squid-cache Squid 2.5.stable2Squid-cache Squid 2.5.stable10Squid-cache Squid 2.5.stable11Squid-cache Squid 2.4.stable4Squid-cache Squid 2.4.stable5Squid-cache Squid 3.0Squid-cache Squid 3.0.stable12Squid-cache Squid 3.0.stable13Squid-cache Squid 3.0.stable19Squid-cache Squid 3.0.stable2Squid-cache Squid 3.0.stable3Squid-cache Squid 3.0.stable4
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3581reflected XSSCVE-2024-26925CVE-2024-27956LFICVE-2024-3607CVE-2024-3107CVE-2024-3295SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook