Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

squid squid 2.5 stable3 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2005-0241
The httpProcessReplyHeader function in http.c for Squid 2.5-STABLE7 and previous versions does not properly set the debug context when it is handling "oversized" HTTP reply headers, which might allow remote malicious users to poison the cache or bypass access controls b...
Squid Squid 2.5.stable3Squid Squid 2.5.stable4Squid Squid 2.5.stable1Squid Squid 2.5.stable2Squid Squid 2.5.stable5Squid Squid 2.5.stable6Squid Squid 2.5.stable7
NA
CVE-2005-0175
Squid 2.5 up to 2.5.STABLE7 allows remote malicious users to poison the cache via an HTTP response splitting attack.
Squid Squid 2.5.6Squid Squid 2.5.stable7Squid Squid 2.5 .stable1Squid Squid 2.5.stable3Squid Squid 2.5.stable4Squid Squid 2.5 .stable6Squid Squid 2.5 Stable3Squid Squid 2.5.stable5Squid Squid 2.5.stable6Squid Squid 2.5 Stable4Squid Squid 2.5 Stable9Squid Squid 2.5.stable1Squid Squid 2.5.stable2Squid Squid 2.5 .stable3Squid Squid 2.5 .stable4Squid Squid 2.5 .stable5
NA
CVE-2005-0174
Squid 2.5 up to 2.5.STABLE7 allows remote malicious users to poison the cache or conduct certain attacks via headers that do not follow the HTTP specification, including (1) multiple Content-Length headers, (2) carriage return (CR) characters that are not part of a CRLF pair, and...
Squid Squid 2.5.6Squid Squid 2.5 .stable1Squid Squid 2.5 .stable3Squid Squid 2.5.stable3Squid Squid 2.5.stable4Squid Squid 2.5.stable5Squid Squid 2.5 .stable6Squid Squid 2.5 Stable3Squid Squid 2.5.stable6Squid Squid 2.5.stable7Squid Squid 2.5 Stable4Squid Squid 2.5 Stable9Squid Squid 2.5.stable1Squid Squid 2.5.stable2Squid Squid 2.5 .stable4Squid Squid 2.5 .stable5
NA
CVE-2005-1345
Squid 2.5.STABLE9 and previous versions does not trigger a fatal error when it identifies missing or invalid ACLs in the http_access configuration, which could lead to less restrictive ACLs than intended by the administrator.
Squid Squid 2.5.stable6Squid Squid 2.5.stable7Squid Squid 2.5.stable1Squid Squid 2.5.stable2Squid Squid 2.5.stable3Squid Squid 2.5.stable4Squid Squid 2.5.stable5Squid Squid 2.5.stable8Squid Squid 2.5.stable9
NA
CVE-2005-0211
Buffer overflow in wccp.c in Squid 2.5 prior to 2.5.STABLE7 allows remote malicious users to cause a denial of service and possibly execute arbitrary code via a long WCCP packet, which is processed by a recvfrom function call that uses an incorrect length parameter.
Squid-cache Squid 2.5.stable1Squid-cache Squid 2.5.stable6Squid-cache Squid 2.5.stable3Squid-cache Squid 2.5.stable5Squid-cache Squid 2.5.stable2Squid-cache Squid 2.5.stable4Debian Debian Linux 3.0
NA
CVE-2005-3258
The rfc1738_do_escape function in ftp.c for Squid 2.5 STABLE11 and previous versions allows remote FTP servers to cause a denial of service (segmentation fault) via certain "odd" responses.
Squid Squid 2.0.patch2Squid Squid 2.0.pre1Squid Squid 2.2.devel3Squid Squid 2.2.devel4Squid Squid 2.2.stable5Squid Squid 2.3.devel2Squid Squid 2.4Squid Squid 2.4.stable1Squid Squid 2.5.stable10Squid Squid 2.5.stable11Squid Squid 2.5.stable8Squid Squid 2.5.stable9Squid Squid 2.0.releaseSquid Squid 2.1.patch1Squid Squid 2.2.pre1Squid Squid 2.2.pre2Squid Squid 2.3.devel3Squid Squid 2.3.stable1Squid Squid 2.4.stable2Squid Squid 2.4.stable3Squid Squid 2.5.stable2Squid Squid 2.5.stable3
NA
CVE-2005-2794
store.c in Squid 2.5.STABLE10 and previous versions allows remote malicious users to cause a denial of service (crash) via certain aborted requests that trigger an assert error related to STORE_PENDING.
Squid Squid 2.0.releaseSquid Squid 2.1.patch1Squid Squid 2.2.devel4Squid Squid 2.2.pre1Squid Squid 2.3.devel3Squid Squid 2.1.patch2Squid Squid 2.1.pre1Squid Squid 2.2.pre2Squid Squid 2.2.stable1Squid Squid 2.2.stable2Squid Squid 2.3.stable2Squid Squid 2.3.stable3Squid Squid 2.4.stable6Squid Squid 2.4.stable7Squid Squid 2.5.stable7Squid Squid 2.5.stable8Squid Squid 2.0.patch1Squid Squid 2.1.pre3Squid Squid 2.1.pre4Squid Squid 2.2.stable3Squid Squid 2.2.stable4Squid Squid 2.3.stable4
NA
CVE-2005-0095
The WCCP message parsing code in Squid 2.5.STABLE7 and previous versions allows remote malicious users to cause a denial of service (crash) via malformed WCCP messages with source addresses that are spoofed to reference Squid's home router and invalid WCCP_I_SEE_YOU cache nu...
Squid Squid 2.1 Patch2Squid Squid 2.3 .stable4Squid Squid 2.4 Stable7Squid Squid 2.5.6Squid Squid 2.5 .stable1Squid Squid 2.5 .stable3Squid Squid 2.6.stable1Squid Squid 2.3 .stable5Squid Squid 2.3 Stable5Squid Squid 2.5.stable1Squid Squid 2.5.stable2Squid Squid 2.5 .stable4Squid Squid 2.5 .stable5Squid Squid 2.4Squid Squid 2.4 .stable2Squid Squid 2.5.stable3Squid Squid 2.5.stable4Squid Squid 2.5.stable5Squid Squid 2.5 .stable6Squid Squid 2.5 Stable3Squid Squid 2.0 Patch2Squid Squid 2.4 .stable6
NA
CVE-2005-0097
The NTLM component in Squid 2.5.STABLE7 and previous versions allows remote malicious users to cause a denial of service (crash) via a malformed NTLM type 3 message that triggers a NULL dereference.
Squid Squid 2.3 .stable5Squid Squid 2.3 Stable5Squid Squid 2.5.stable2Squid Squid 2.5.stable3Squid Squid 2.5 .stable4Squid Squid 2.5 .stable5Squid Squid 2.4Squid Squid 2.4 .stable2Squid Squid 2.4 .stable6Squid Squid 2.5.stable4Squid Squid 2.5.stable5Squid Squid 2.5 .stable6Squid Squid 2.5 Stable3Squid Squid 2.0 Patch2Squid Squid 2.4 .stable7Squid Squid 2.4 Stable7Squid Squid 2.5.stable6Squid Squid 2.5.stable7Squid Squid 2.5 Stable4Squid Squid 2.5 Stable9Squid Squid 2.1 Patch2Squid Squid 2.3 .stable4
NA
CVE-2005-0094
Buffer overflow in the gopherToHTML function in the Gopher reply parser for Squid 2.5.STABLE7 and previous versions allows remote malicious Gopher servers to cause a denial of service (crash) via crafted responses.
Squid Squid 2.3 Stable5Squid Squid 2.4Squid Squid 2.5.stable2Squid Squid 2.5.stable3Squid Squid 2.5 .stable5Squid Squid 2.5 .stable6Squid Squid 2.4 .stable2Squid Squid 2.4 .stable6Squid Squid 2.5.stable4Squid Squid 2.5.stable5Squid Squid 2.5 Stable3Squid Squid 2.5 Stable4Squid Squid 2.0 Patch2Squid Squid 2.1 Patch2Squid Squid 2.4 .stable7Squid Squid 2.4 Stable7Squid Squid 2.5.stable6Squid Squid 2.5.stable7Squid Squid 2.5 Stable9Squid Squid 2.6.stable1Squid Squid 2.3 .stable4Squid Squid 2.3 .stable5
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4644unprivilegedCVE-2024-3494CVE-2024-22460CVE-2024-26026CVE-2024-23473firewallCVE-2024-28889XML external entity
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook