SQ
Vendor
Squid
41
CVEs
0
On KEV
0
New 30D
Products
SQ–
Squid
Squid
37 CVEs0 on KEV0 new
SW–
Squid Web Proxy
Squid
2 CVEs0 on KEV0 new
SW–
Squid Web Proxy Cache
Squid
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2009-0801 | SW Squid Web Proxy Cache Squid | – | Mar 4 | Squid, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for… |
| CVE-2009-0478 | SQ Squid Squid | – | Feb 8 | Squid 2.7 to 2.7.STABLE5, 3.0 to 3.0.STABLE12, and 3.1 to 3.1.0.4 allows remote attackers to cause a denial of service via an HTTP request with an invalid version number, which… |
| CVE-2008-1612 | SQ Squid Squid | – | Apr 1 | The arrayShrink function (lib/Array.c) in Squid 2.6.STABLE17 allows attackers to cause a denial of service (process exit) via unknown vectors that cause an array to shrink to 0… |
| CVE-2007-6239 | SW Squid Web Proxy Cache Squid | – | Dec 4 | The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0 allows remote attackers to cause a denial of service (crash) via unknown vectors… |
| CVE-2007-1560 | SQ Squid Squid | – | Mar 21 | The clientProcessRequest() function in src/client_side.c in Squid 2.6 before 2.6.STABLE12 allows remote attackers to cause a denial of service (daemon crash) via crafted TRACE… |
| CVE-2007-0247 | SQ Squid Squid | – | Jan 16 | squid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of service (core dump) via crafted FTP directory listing responses, possibly related to the… |
| CVE-2007-0248 | SQ Squid Squid | – | Jan 16 | The aclMatchExternal function in Squid before 2.6.STABLE7 allows remote attackers to cause a denial of service (crash) by causing an external_acl queue overload, which triggers an… |
| CVE-2005-3322 | SQ Squid Squid | – | Oct 27 | Unspecified vulnerability in Squid on SUSE Linux 9.0 allows remote attackers to cause a denial of service (crash) via HTTPs (SSL) |
| CVE-2005-3258 | SQ Squid Squid | – | Oct 20 | The rfc1738_do_escape function in ftp.c for Squid 2.5 STABLE11 and earlier allows remote FTP servers to cause a denial of service (segmentation fault) via certain "odd" responses |
| CVE-2005-2917 | SQ Squid Squid | – | Sep 30 | Squid 2.5.STABLE10 and earlier, while performing NTLM authentication, does not properly handle certain request sequences, which allows attackers to cause a denial of service… |
| CVE-2005-2796 | SQ Squid Squid | – | Sep 7 | The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (segmentation fault) via certain crafted requests |
| CVE-2005-2794 | SQ Squid Squid | – | Sep 7 | store.c in Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (crash) via certain aborted requests that trigger an assert error related to… |
| CVE-2005-1711 | SQ Squid Squid | – | May 24 | Gibraltar Firewall 2.2 and earlier, when using the ClamAV update to 0.81 for Squid, uses a defunct ClamAV method to scan memory for viruses, which does not return an error code… |
| CVE-2005-1519 | SQ Squid Squid | – | May 11 | Squid 2.5 STABLE9 and earlier, when the DNS client port is unfiltered and the environment does not prevent IP spoofing, allows remote attackers to spoof DNS lookups |
| CVE-2005-0173 | SQ Squid Squid | – | May 2 | squid_ldap_auth in Squid 2.5 and earlier allows remote authenticated users to bypass username-based Access Control Lists (ACLs) via a username with a space at the beginning or… |
| CVE-2005-1345 | SQ Squid Squid | – | May 2 | Squid 2.5.STABLE9 and earlier does not trigger a fatal error when it identifies missing or invalid ACLs in the http_access configuration, which could lead to less restrictive ACLs… |
| CVE-2005-0446 | SQ Squid Squid | – | May 2 | Squid 2.5.STABLE8 and earlier allows remote attackers to cause a denial of service (crash) via certain DNS responses regarding (1) Fully Qualified Domain Names (FQDN) in… |
| CVE-2005-0241 | SQ Squid Squid | – | May 2 | The httpProcessReplyHeader function in http.c for Squid 2.5-STABLE7 and earlier does not properly set the debug context when it is handling "oversized" HTTP reply headers, which… |
| CVE-2005-0194 | SQ Squid Squid | – | May 2 | Squid 2.5, when processing the configuration file, parses empty Access Control Lists (ACLs), including proxy_auth ACLs without defined auth schemes, in a way that effectively… |
| CVE-2005-0718 | SQ Squid Squid | – | Apr 14 | Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (segmentation fault) by aborting the connection during a (1) PUT or (2) POST request, which… |
| CVE-2005-0626 | SQ Squid Squid | – | Mar 8 | Race condition in Squid 2.5.STABLE7 to 2.5.STABLE9, when using the Netscape Set-Cookie recommendations for handling cookies in caches, may cause Set-Cookie headers to be sent to… |
| CVE-2005-0174 | SQ Squid Squid | – | Feb 7 | Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or conduct certain attacks via headers that do not follow the HTTP specification, including (1) multiple… |
| CVE-2005-0175 | SQ Squid Squid | – | Feb 7 | Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache via an HTTP response splitting attack |
| CVE-2004-0918 | SQ Squid Squid | – | Jan 27 | The asn_parse_header function (asn1.c) in the SNMP module for Squid Web Proxy Cache before 2.4.STABLE7 allows remote attackers to cause a denial of service (server restart) via… |
| CVE-2005-0096 | SQ Squid Squid | – | Jan 25 | Memory leak in the NTLM fakeauth_auth helper for Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (memory consumption) |
| CVE-2005-0095 | SQ Squid Squid | – | Jan 15 | The WCCP message parsing code in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via malformed WCCP messages with source addresses that… |
| CVE-2005-0094 | SQ Squid Squid | – | Jan 15 | Buffer overflow in the gopherToHTML function in the Gopher reply parser for Squid 2.5.STABLE7 and earlier allows remote malicious Gopher servers to cause a denial of service… |
| CVE-2005-0097 | SQ Squid Squid | – | Jan 11 | The NTLM component in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via a malformed NTLM type 3 message that triggers a NULL… |
| CVE-2004-2654 | SQ Squid Squid | – | Dec 31 | The clientAbortBody function in client_side.c in Squid Web Proxy Cache before 2.6 STABLE6 allows remote attackers to cause a denial of service (segmentation fault) via unspecified… |
| CVE-2004-0832 | SQ Squid Squid | – | Nov 3 | The (1) ntlm_fetch_string and (2) ntlm_get_string functions in Squid 2.5.6 and earlier, with NTLM authentication enabled, allow remote attackers to cause a denial of service… |
| CVE-2004-0189 | SQ Squid Squid | – | Mar 15 | The "%xx" URL decoding function in Squid 2.5STABLE4 and earlier allows remote attackers to bypass url_regex ACLs via a URL with a NULL ("%00") character, which causes Squid to use… |
| CVE-2002-2414 | SQ Squid Squid | – | Dec 31 | Opera 6.0.3, when using Squid 2.4 for HTTPS proxying, does not properly handle when accepting a non-global certificate authority (CA) certificate from a site and establishing a… |
| CVE-2002-0713 | SQ Squid Squid | – | Jul 26 | Buffer overflows in Squid before 2.4.STABLE6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code (1) via the MSNT auth helper… |
| CVE-2002-0715 | SQ Squid Squid | – | Jul 26 | Vulnerability in Squid before 2.4.STABLE6 related to proxy authentication credentials may allow remote web sites to obtain the user's proxy login and password |
| CVE-2002-0714 | SQ Squid Squid | – | Jul 26 | FTP proxy in Squid before 2.4.STABLE6 does not compare the IP addresses of control and data connections with the FTP server, which allows remote attackers to bypass firewall rules… |
| CVE-2002-0163 | SQ Squid Squid | – | Mar 26 | Heap-based buffer overflow in Squid before 2.4 STABLE4, and Squid 2.5 and 2.6 until March 12, 2002 distributions, allows remote attackers to cause a denial of service, and… |
| CVE-2002-0068 | SQ Squid Squid | – | Mar 8 | Squid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of service (core dump) and possibly execute arbitrary code with an ftp:// URL with a larger number of… |
| CVE-2002-0069 | SQ Squid Squid | – | Mar 8 | Memory leak in SNMP in Squid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of service |
| CVE-2002-0067 | SQ Squid Squid | – | Mar 8 | Squid 2.4 STABLE3 and earlier does not properly disable HTCP, even when "htcp_port 0" is specified in squid.conf, which could allow remote attackers to bypass intended access… |
| CVE-2001-0843 | SW Squid Web Proxy Squid | – | Dec 6 | Squid proxy server 2.4 and earlier allows remote attackers to cause a denial of service (crash) via a mkdir-only FTP PUT request |
| CVE-2001-1030 | SW Squid Web Proxy Squid | – | Jul 18 | Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists (ACLs) when the httpd_accel_host and http_accel_with_proxy off settings are used, which… |