Show filters
10 Total Results
Displaying 1-10 of 10
Sort by:
Attacker Value
Unknown

CVE-2009-0801

Disclosure Date: March 04, 2009 (last updated October 04, 2023)
Squid, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header.
0
0
Attacker Value
Unknown

CVE-2007-6239

Disclosure Date: December 04, 2007 (last updated October 04, 2023)
The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0 allows remote attackers to cause a denial of service (crash) via unknown vectors related to HTTP headers and an Array memory leak during requests for cached objects.
0
0
Attacker Value
Unknown

CVE-2004-2479

Disclosure Date: December 31, 2004 (last updated February 22, 2025)
Squid Web Proxy Cache 2.5 might allow remote attackers to obtain sensitive information via URLs containing invalid hostnames that cause DNS operations to fail, which results in references to previously used error messages.
0
0
Attacker Value
Unknown

CVE-2004-2480

Disclosure Date: December 31, 2004 (last updated February 22, 2025)
Squid Web Proxy Cache 2.3.STABLE5 allows remote attackers to bypass security controls and access arbitrary websites via "@@" sequences in a URL within Internet Explorer.
0
0
Attacker Value
Unknown

CVE-2004-0541

Disclosure Date: August 06, 2004 (last updated February 22, 2025)
Buffer overflow in the ntlm_check_auth (NTLM authentication) function for Squid Web Proxy Cache 2.5.x and 3.x, when compiled with NTLM handlers enabled, allows remote attackers to execute arbitrary code via a long password ("pass" variable).
0
0
Attacker Value
Unknown

CVE-2001-0843

Disclosure Date: December 06, 2001 (last updated February 22, 2025)
Squid proxy server 2.4 and earlier allows remote attackers to cause a denial of service (crash) via a mkdir-only FTP PUT request.
0
0
Attacker Value
Unknown

CVE-2001-1030

Disclosure Date: July 18, 2001 (last updated February 22, 2025)
Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists (ACLs) when the httpd_accel_host and http_accel_with_proxy off settings are used, which allows attackers to bypass the ACLs and conduct unauthorized activities such as port scanning.
0
0
Attacker Value
Unknown

CVE-2001-0142

Disclosure Date: March 12, 2001 (last updated February 22, 2025)
squid 2.3 and earlier allows local users to overwrite arbitrary files via a symlink attack in some configurations.
0
0
Attacker Value
Unknown

CVE-1999-1481

Disclosure Date: December 31, 1999 (last updated February 22, 2025)
Squid 2.2.STABLE5 and below, when using external authentication, allows attackers to bypass access controls via a newline in the user/password pair.
0
0
Attacker Value
Unknown

CVE-1999-1273

Disclosure Date: February 20, 1998 (last updated February 22, 2025)
Squid Internet Object Cache 1.1.20 allows users to bypass access control lists (ACLs) by encoding the URL with hexadecimal escape sequences.
0
0