Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

squid squid 2.5.stable6 vulnerabilities and exploits

(subscribe to this query)
2.6
CVSSv2
CVE-2005-0626
Race condition in Squid 2.5.STABLE7 to 2.5.STABLE9, when using the Netscape Set-Cookie recommendations for handling cookies in caches, may cause Set-Cookie headers to be sent to other users, which allows malicious users to steal the related cookies.
Squid Squid 2.5.stable6Squid Squid 2.5.stable7Squid Squid 2.5.stable5
5
CVSSv2
CVE-2005-0241
The httpProcessReplyHeader function in http.c for Squid 2.5-STABLE7 and previous versions does not properly set the debug context when it is handling "oversized" HTTP reply headers, which might allow remote malicious users to poison the cache or bypass access controls b...
Squid Squid 2.5.stable3Squid Squid 2.5.stable4Squid Squid 2.5.stable1Squid Squid 2.5.stable2Squid Squid 2.5.stable5Squid Squid 2.5.stable6Squid Squid 2.5.stable7
7.5
CVSSv2
CVE-2005-1345
Squid 2.5.STABLE9 and previous versions does not trigger a fatal error when it identifies missing or invalid ACLs in the http_access configuration, which could lead to less restrictive ACLs than intended by the administrator.
Squid Squid 2.5.stable6Squid Squid 2.5.stable7Squid Squid 2.5.stable1Squid Squid 2.5.stable2Squid Squid 2.5.stable3Squid Squid 2.5.stable4Squid Squid 2.5.stable5Squid Squid 2.5.stable8Squid Squid 2.5.stable9
7.5
CVSSv2
CVE-2005-0211
Buffer overflow in wccp.c in Squid 2.5 prior to 2.5.STABLE7 allows remote malicious users to cause a denial of service and possibly execute arbitrary code via a long WCCP packet, which is processed by a recvfrom function call that uses an incorrect length parameter.
Squid-cache Squid 2.5.stable1Squid-cache Squid 2.5.stable6Squid-cache Squid 2.5.stable3Squid-cache Squid 2.5.stable5Squid-cache Squid 2.5.stable2Squid-cache Squid 2.5.stable4Debian Debian Linux 3.0
5
CVSSv2
CVE-2005-0174
Squid 2.5 up to 2.5.STABLE7 allows remote malicious users to poison the cache or conduct certain attacks via headers that do not follow the HTTP specification, including (1) multiple Content-Length headers, (2) carriage return (CR) characters that are not part of a CRLF pair, and...
Squid Squid 2.5.6Squid Squid 2.5 .stable1Squid Squid 2.5 .stable3Squid Squid 2.5.stable3Squid Squid 2.5.stable4Squid Squid 2.5.stable5Squid Squid 2.5 .stable6Squid Squid 2.5 Stable3Squid Squid 2.5.stable6Squid Squid 2.5.stable7Squid Squid 2.5 Stable4Squid Squid 2.5 Stable9Squid Squid 2.5.stable1Squid Squid 2.5.stable2Squid Squid 2.5 .stable4Squid Squid 2.5 .stable5
5
CVSSv2
CVE-2005-0175
Squid 2.5 up to 2.5.STABLE7 allows remote malicious users to poison the cache via an HTTP response splitting attack.
Squid Squid 2.5.6Squid Squid 2.5.stable7Squid Squid 2.5 .stable1Squid Squid 2.5.stable3Squid Squid 2.5.stable4Squid Squid 2.5 .stable6Squid Squid 2.5 Stable3Squid Squid 2.5.stable5Squid Squid 2.5.stable6Squid Squid 2.5 Stable4Squid Squid 2.5 Stable9Squid Squid 2.5.stable1Squid Squid 2.5.stable2Squid Squid 2.5 .stable3Squid Squid 2.5 .stable4Squid Squid 2.5 .stable5
5
CVSSv2
CVE-2005-0094
Buffer overflow in the gopherToHTML function in the Gopher reply parser for Squid 2.5.STABLE7 and previous versions allows remote malicious Gopher servers to cause a denial of service (crash) via crafted responses.
Squid Squid 2.3 Stable5Squid Squid 2.4Squid Squid 2.5.stable2Squid Squid 2.5.stable3Squid Squid 2.5 .stable5Squid Squid 2.5 .stable6Squid Squid 2.4 .stable2Squid Squid 2.4 .stable6Squid Squid 2.5.stable4Squid Squid 2.5.stable5Squid Squid 2.5 Stable3Squid Squid 2.5 Stable4Squid Squid 2.0 Patch2Squid Squid 2.1 Patch2Squid Squid 2.4 .stable7Squid Squid 2.4 Stable7Squid Squid 2.5.stable6Squid Squid 2.5.stable7Squid Squid 2.5 Stable9Squid Squid 2.6.stable1Squid Squid 2.3 .stable4Squid Squid 2.3 .stable5
5
CVSSv2
CVE-2005-0095
The WCCP message parsing code in Squid 2.5.STABLE7 and previous versions allows remote malicious users to cause a denial of service (crash) via malformed WCCP messages with source addresses that are spoofed to reference Squid's home router and invalid WCCP_I_SEE_YOU cache nu...
Squid Squid 2.1 Patch2Squid Squid 2.3 .stable4Squid Squid 2.4 Stable7Squid Squid 2.5.6Squid Squid 2.5 .stable1Squid Squid 2.5 .stable3Squid Squid 2.6.stable1Squid Squid 2.3 .stable5Squid Squid 2.3 Stable5Squid Squid 2.5.stable1Squid Squid 2.5.stable2Squid Squid 2.5 .stable4Squid Squid 2.5 .stable5Squid Squid 2.4Squid Squid 2.4 .stable2Squid Squid 2.5.stable3Squid Squid 2.5.stable4Squid Squid 2.5.stable5Squid Squid 2.5 .stable6Squid Squid 2.5 Stable3Squid Squid 2.0 Patch2Squid Squid 2.4 .stable6
5
CVSSv2
CVE-2005-0096
Memory leak in the NTLM fakeauth_auth helper for Squid 2.5.STABLE7 and previous versions allows remote malicious users to cause a denial of service (memory consumption).
Squid Squid 2.4 .stable2Squid Squid 2.4 .stable6Squid Squid 2.5.stable5Squid Squid 2.5.stable6Squid Squid 2.5 Stable3Squid Squid 2.5 Stable4Squid Squid 2.0 Patch2Squid Squid 2.1 Patch2Squid Squid 2.4 .stable7Squid Squid 2.4 Stable7Squid Squid 2.5.6Squid Squid 2.5.stable7Squid Squid 2.5 .stable1Squid Squid 2.5 Stable9Squid Squid 2.6.stable1Squid Squid 2.3 .stable4Squid Squid 2.3 .stable5Squid Squid 2.5.stable1Squid Squid 2.5.stable2Squid Squid 2.5 .stable3Squid Squid 2.5 .stable4Squid Squid 2.3 Stable5
5
CVSSv2
CVE-2005-0097
The NTLM component in Squid 2.5.STABLE7 and previous versions allows remote malicious users to cause a denial of service (crash) via a malformed NTLM type 3 message that triggers a NULL dereference.
Squid Squid 2.3 .stable5Squid Squid 2.3 Stable5Squid Squid 2.5.stable2Squid Squid 2.5.stable3Squid Squid 2.5 .stable4Squid Squid 2.5 .stable5Squid Squid 2.4Squid Squid 2.4 .stable2Squid Squid 2.4 .stable6Squid Squid 2.5.stable4Squid Squid 2.5.stable5Squid Squid 2.5 .stable6Squid Squid 2.5 Stable3Squid Squid 2.0 Patch2Squid Squid 2.4 .stable7Squid Squid 2.4 Stable7Squid Squid 2.5.stable6Squid Squid 2.5.stable7Squid Squid 2.5 Stable4Squid Squid 2.5 Stable9Squid Squid 2.1 Patch2Squid Squid 2.3 .stable4
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
hard-codedCVE-2024-27202NULL pointer dereferenceCVE-2024-28075CVE-2024-33608CVE-2024-28889CVE-2024-34572template injectionCVE-2024-34351
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook