Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2007-6239

squid: DoS in cache updates

The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0 allows remote attackers to cause a denial of service (crash) via unknown vectors related to HTTP headers and an Array memory leak during requests for cached objects.

CVSS 2.0 · 5.0 Medium EPSS 26.7% KEV · Not listed
Vendors
Redhat Squid
Products
Enterprise Linux Squid Web Proxy Cache
CVE-2009-0801

squid: remote bypass of access controls

Squid, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header.

CVSS 2.0 · 5.4 Medium EPSS 3.1% KEV · Not listed
Vendors
Squid
Products
Squid Web Proxy Cache
CVE-2001-0843

security flaw

Squid proxy server 2.4 and earlier allows remote attackers to cause a denial of service (crash) via a mkdir-only FTP PUT request.

CVSS 2.0 · 5.0 Medium EPSS 2.8% KEV · Not listed
Vendors
Redhat Squid
Products
Linux Squid Web Proxy
CVE-2001-1030

security flaw

Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists (ACLs) when the httpd_accel_host and http_accel_with_proxy off settings are used, which allows attackers to bypass the ACLs and conduct unauthorized activities such as port scanning.

CVSS 2.0 · 7.5 High EPSS 2.0% KEV · Not listed
Vendors
Caldera Immunix Mandrakesoft and 3 more
Products
Openlinux Server Immunix Mandrake Linux and 5 more