Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

squid web proxy cache vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2007-6239
The "cache update reply processing" functionality in Squid 2.x prior to 2.6.STABLE17 and Squid 3.0 allows remote malicious users to cause a denial of service (crash) via unknown vectors related to HTTP headers and an Array memory leak during requests for cached objects.
Squid Squid Web Proxy Cache 2.0 Patch2Squid Squid Web Proxy Cache 2.1 Patch2Squid Squid Web Proxy Cache 2.5.stable11Squid Squid Web Proxy Cache 2.5.stable12Squid Squid Web Proxy Cache 2.5 Stable4Squid Squid Web Proxy Cache 2.5 Stable5Squid Squid Web Proxy Cache 2.6.stable14Squid Squid Web Proxy Cache 2.6.stable15Squid Squid Web Proxy Cache 2.6.stable7Squid Squid Web Proxy Cache 3.0Squid Squid Web Proxy Cache 2.4 Stable2Squid Squid Web Proxy Cache 2.4 Stable4Squid Squid Web Proxy Cache 2.5 .stable9Squid Squid Web Proxy Cache 2.5 Stable1Squid Squid Web Proxy Cache 2.5 Stable8Squid Squid Web Proxy Cache 2.6Squid Squid Web Proxy Cache 2.6.stable1Squid Squid Web Proxy Cache 2.6.stable3Squid Squid Web Proxy Cache 2.6.stable4Squid Squid Web Proxy Cache 3.0 Pre3Squid Squid Web Proxy Cache 2.3.stable4Squid Squid Web Proxy Cache 2.3.stable5
5.4
CVSSv2
CVE-2009-0801
Squid, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote malicious users to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted ...
Squid Squid Web Proxy Cache 3.0 Pre1Squid Squid Web Proxy Cache 3.0 Pre2Squid Squid Web Proxy Cache 3.0 Pre3Squid Squid Web Proxy Cache 2.7Squid Squid Web Proxy Cache 3.0Squid Squid Web Proxy Cache 3.0 Stable6Squid Squid Web Proxy Cache 3.0 Stable13Squid Squid Web Proxy Cache 2.7.stable5Squid Squid Web Proxy Cache 3.0 Stable4Squid Squid Web Proxy Cache 3.0 Stable3Squid Squid Web Proxy Cache 3.0 Stable2Squid Squid Web Proxy Cache 3.0 Stable1Squid Squid Web Proxy Cache 3.0 Stable7Squid Squid Web Proxy Cache 3.0 Stable5Squid Squid Web Proxy Cache 3.0 Stable12Squid Squid Web Proxy Cache 2.7.stable6
5
CVSSv2
CVE-2004-2479
Squid Web Proxy Cache 2.5 might allow remote malicious users to obtain sensitive information via URLs containing invalid hostnames that cause DNS operations to fail, which results in references to previously used error messages.
National Science Foundation Squid Web Proxy Cache 2.5 Stable4National Science Foundation Squid Web Proxy Cache 2.5 Stable5National Science Foundation Squid Web Proxy Cache 2.5 Stable1National Science Foundation Squid Web Proxy Cache 2.5 Stable6National Science Foundation Squid Web Proxy Cache 2.5 Stable7National Science Foundation Squid Web Proxy Cache 2.5 Stable2National Science Foundation Squid Web Proxy Cache 2.5 Stable3
10
CVSSv2
CVE-2004-0541
Buffer overflow in the ntlm_check_auth (NTLM authentication) function for Squid Web Proxy Cache 2.5.x and 3.x, when compiled with NTLM handlers enabled, allows remote malicious users to execute arbitrary code via a long password ("pass" variable).
National Science Foundation Squid Web Proxy Cache 2.5 StableNational Science Foundation Squid Web Proxy Cache 3 Pre
5
CVSSv2
CVE-2004-2480
Squid Web Proxy Cache 2.3.STABLE5 allows remote malicious users to bypass security controls and access arbitrary websites via "@@" sequences in a URL within Internet Explorer.
National Science Foundation Squid Web Proxy Cache 2.3 Stable5
5
CVSSv2
CVE-2001-0843
Squid proxy server 2.4 and previous versions allows remote malicious users to cause a denial of service (crash) via a mkdir-only FTP PUT request.
Squid Squid Web Proxy
5
CVSSv2
CVE-2016-10002
Incorrect processing of responses to If-None-Modified HTTP conditional requests in Squid HTTP Proxy 3.1.10 up to and including 3.1.23, 3.2.0.3 up to and including 3.5.22, and 4.0.1 up to and including 4.0.16 leads to client-specific Cookie data being leaked to other clients. Atta...
Debian Debian Linux 8.0Squid-cache Squid 3.1.12Squid-cache Squid 3.1.14Squid-cache Squid 3.1.21Squid-cache Squid 3.1.22Squid-cache Squid 3.1.15Squid-cache Squid 3.1.16Squid-cache Squid 3.1.10Squid-cache Squid 3.1.11Squid-cache Squid 3.1.19Squid-cache Squid 3.1.20Squid-cache Squid 3.1.23Squid-cache Squid 3.1.17Squid-cache Squid 3.1.18Squid-cache Squid 3.2.0.14Squid-cache Squid 3.2.0.15Squid-cache Squid 3.2.0.6Squid-cache Squid 3.2.0.7Squid-cache Squid 3.2.13Squid-cache Squid 3.2.2Squid-cache Squid 3.2.9Squid-cache Squid 3.2.14
6.8
CVSSv2
CVE-2011-3205
Buffer overflow in the gopherToHTML function in gopher.cc in the Gopher reply parser in Squid 3.0 prior to 3.0.STABLE26, 3.1 prior to 3.1.15, and 3.2 prior to 3.2.0.11 allows remote Gopher servers to cause a denial of service (memory corruption and daemon restart) or possibly hav...
Squid-cache Squid 3.0.stable13Squid-cache Squid 3.0.stable9Squid-cache Squid 3.0.stable20Squid-cache Squid 3.0.stable14Squid-cache Squid 3.0.stable3Squid-cache Squid 3.0.stable4Squid-cache Squid 3.0.stable24Squid-cache Squid 3.0.stable16Squid-cache Squid 3.0.stable11Squid-cache Squid 3.0.stable18Squid-cache Squid 3.0.stable1Squid-cache Squid 3.0.stable6Squid-cache Squid 3.0.stable15Squid-cache Squid 3.0.stable5Squid-cache Squid 3.0.stable21Squid-cache Squid 3.0.stable17Squid-cache Squid 3.0.stable10Squid-cache Squid 3.0.stable8Squid-cache Squid 3.0.stable12Squid-cache Squid 3.0.stable25Squid-cache Squid 3.0.stable23Squid-cache Squid 3.0.stable22
5
CVSSv2
CVE-2010-3072
The string-comparison functions in String.cci in Squid 3.x prior to 3.1.8 and 3.2.x prior to 3.2.0.2 allow remote malicious users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request.
Squid-cache Squid 3.0.stable3Squid-cache Squid 3.0.stable4Squid-cache Squid 3.0.stable11Squid-cache Squid 3.0.stable18Squid-cache Squid 3.0.stable19Squid-cache Squid 3.0Squid-cache Squid 3.1Squid-cache Squid 3.1.0.7Squid-cache Squid 3.1.0.8Squid-cache Squid 3.1.0.16Squid-cache Squid 3.1.0.17Squid-cache Squid 3.1.5.1Squid-cache Squid 3.1.6Squid-cache Squid 3.0.stable7Squid-cache Squid 3.0.stable8Squid-cache Squid 3.0.stable14Squid-cache Squid 3.0.stable15Squid-cache Squid 3.0.stable22Squid-cache Squid 3.0.stable23Squid-cache Squid 3.1.0.3Squid-cache Squid 3.1.0.4Squid-cache Squid 3.1.0.11
5
CVSSv2
CVE-2012-5643
Multiple memory leaks in tools/cachemgr.cc in cachemgr.cgi in Squid 2.x and 3.x prior to 3.1.22, 3.2.x prior to 3.2.4, and 3.3.x prior to 3.3.0.2 allow remote malicious users to cause a denial of service (memory consumption) via (1) invalid Content-Length headers, (2) long POST r...
Squid-cache Squid 2.6Squid-cache Squid 2.0Squid-cache Squid 2.7Squid-cache Squid 2.2Squid-cache Squid 2.3Squid-cache Squid 2.5Squid-cache Squid 2.1Squid-cache Squid 2.4Squid-cache Squid 3.1.0.18Squid-cache Squid 3.0.stable13Squid-cache Squid 3.1.21Squid-cache Squid 3.0Squid-cache Squid 3.0.stable9Squid-cache Squid 3.1.13Squid-cache Squid 3.0.stable20Squid-cache Squid 3.0.stable14Squid-cache Squid 3.0.stable3Squid-cache Squid 3.1.17Squid-cache Squid 3.1.0.7Squid-cache Squid 3.1.0.14Squid-cache Squid 3.0.stable4Squid-cache Squid 3.1.0.12
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27977IMAPlocal usersCVE-2024-32038CVE-2023-49963CVE-2023-22869CVE-2024-31497localCVE-2024-2961
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook