Overview 182 matches · 0 in Waratek scope · 0 protected · 1 exploited · 0 CISA KEV · 15 public PoC · 25 EPSS ≥ 0.5
182matches
0in Waratek scope0.0%
0protected0.0%
1exploited0.5%
0CISA KEV0.0%
15public PoC8.2%
25EPSS ≥ 0.513.7%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
8
4.4%
Not applicable
174
95.6%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
182
100.0%
not established
0
0.0%
unrecorded
0
0.0%
split by
peak 23 / year
19981
Not applicable1
High1
not blocked1
No public exploit1
19991
Not applicable1
Medium1
not blocked1
Working exploit published1
20000
20013
Not applicable3
High1
Medium1
Low1
not blocked3
No public exploit3
200210
Not applicable10
High6
Medium3
Low1
not blocked10
Working exploit published2
No public exploit8
20030
20046
Not applicable6
High2
Medium4
not blocked6
Working exploit published3
No public exploit3
200523
Not applicable23
High5
Medium17
Low1
not blocked23
Forecast only3
No public exploit20
20060
20075
Not applicable5
High1
Medium4
not blocked5
Working exploit published1
No public exploit4
20085
Not applicable5
High3
Medium2
not blocked5
Working exploit published1
No public exploit4
20097
Not applicable7
Medium7
not blocked7
Working exploit published1
Forecast only1
No public exploit5
20104
Not applicable4
Medium4
not blocked4
Forecast only1
No public exploit3
20112
Not applicable2
Medium2
not blocked2
No public exploit2
20124
Not applicable4
Medium4
not blocked4
No public exploit4
20134
Not applicable4
High2
Medium2
not blocked4
Working exploit published1
No public exploit3
20145
Not applicable5
Medium5
not blocked5
Forecast only2
No public exploit3
20154
Not applicable4
Medium3
Low1
not blocked4
No public exploit4
201615
Not applicable15
High13
Medium1
Low1
not blocked15
Proof of concept only1
Forecast only2
No public exploit12
20173
Not applicable3
High2
Medium1
not blocked3
No public exploit3
20185
Not applicable5
High2
Medium3
not blocked5
Proof of concept only1
No public exploit4
201911
Not applicable11
Critical3
High4
Medium4
not blocked11
Forecast only2
No public exploit9
202018
Outside Waratek scope1
Not applicable17
Critical4
High8
Medium6
not blocked18
Forecast only1
No public exploit17
202110
Outside Waratek scope5
Not applicable5
High3
Medium7
not blocked10
Forecast only3
No public exploit7
20223
Not applicable3
High1
Medium2
not blocked3
No public exploit3
202318
Not applicable18
Critical2
High9
Medium7
not blocked18
Working exploit published1
Proof of concept only5
Forecast only3
No public exploit9
20246
Outside Waratek scope2
Not applicable4
High4
Medium2
not blocked6
Proof of concept only2
Forecast only1
No public exploit3
20253
Not applicable3
Critical2
Medium1
not blocked3
Exploited1
No public exploit2
20266
Not applicable6
Critical2
High1
Medium3
not blocked6
Proof of concept only2
No public exploit4
1999200220052008201120142017202020232026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2015-3455 | Low | 2015-05-18 | Not applicable | No public exploit | Squid 3.2.x before 3.2.14, 3.3.x before 3.3.14, 3.4.x before 3.4.13, and 3.5.x before 3.5.4, when configured with client-first SSL-bump, do not properly validate the domain or hostname fields of X.509 certificates, which allows man-in-the-middle attackers to spoof SSL servers via a valid certificate. |
| CVE-2015-0881 | Medium | 2015-02-20 | Not applicable | No public exploit | CRLF injection vulnerability in Squid before 3.1.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted header in a response. |
| CVE-2014-7142 | Medium | 2014-11-26 | Not applicable | No public exploit | The pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive information or cause a denial of service (crash) via a crafted (1) ICMP or (2) ICMP6 packet size. |
| CVE-2014-7141 | Medium | 2014-11-26 | Not applicable | Forecast only | The pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and crash) via a crafted type in an (1) ICMP or (2) ICMP6 packet. |
| CVE-2014-6270 | Medium | 2014-09-12 | Not applicable | No public exploit | Off-by-one error in the snmpHandleUdp function in snmp_core.cc in Squid 2.x and 3.x, when an SNMP port is configured, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted UDP SNMP request, which triggers a heap-based buffer overflow. |
| CVE-2014-3609 | Medium | 2014-09-11 | Not applicable | Forecast only | HttpHdrRange.cc in Squid 3.x before 3.3.12 and 3.4.x before 3.4.6 allows remote attackers to cause a denial of service (crash) via a request with crafted "Range headers with unidentifiable byte-range values." |
| CVE-2014-0128 | Medium | 2014-04-14 | Not applicable | No public exploit | Squid 3.1 before 3.3.12 and 3.4 before 3.4.4, when SSL-Bump is enabled, allows remote attackers to cause a denial of service (assertion failure) via a crafted range request, related to state management. |
| CVE-2013-1839 | High | 2013-09-30 | Not applicable | No public exploit | The strHdrAcptLangGetItem function in errorpage.cc in Squid 3.2.x before 3.2.9 and 3.3.x before 3.3.3 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a "," character in an Accept-Language header. |
| CVE-2013-4123 | Medium | 2013-09-16 | Not applicable | Working exploit published | client_side_request.cc in Squid 3.2.x before 3.2.13 and 3.3.x before 3.3.8 allows remote attackers to cause a denial of service via a crafted port number in a HTTP Host header. |
| CVE-2013-4115 | High | 2013-08-09 | Not applicable | No public exploit | Buffer overflow in the idnsALookup function in dns_internal.cc in Squid 3.2 through 3.2.11 and 3.3 through 3.3.6 allows remote attackers to cause a denial of service (memory corruption and server termination) via a long name in a DNS lookup request. |
| CVE-2013-0189 | Medium | 2013-02-08 | Not applicable | No public exploit | cachemgr.cgi in Squid 3.1.x and 3.2.x, possibly 3.1.22, 3.2.4, and other versions, allows remote attackers to cause a denial of service (resource consumption) via a crafted request. NOTE: this issue is due to an incorrect fix for CVE-2012-5643, possibly involving an incorrect order of arguments or incorrect comparison. |
| CVE-2012-5643 | Medium | 2012-12-20 | Not applicable | No public exploit | Multiple memory leaks in tools/cachemgr.cc in cachemgr.cgi in Squid 2.x and 3.x before 3.1.22, 3.2.x before 3.2.4, and 3.3.x before 3.3.0.2 allow remote attackers to cause a denial of service (memory consumption) via (1) invalid Content-Length headers, (2) long POST requests, or (3) crafted authentication credentials. |
| CVE-2012-4667 | Medium | 2012-08-25 | Not applicable | No public exploit | Multiple cross-site scripting (XSS) vulnerabilities in SquidClamav 5.x before 5.8 allow remote attackers to inject arbitrary web script or HTML via the (1) url, (2) virus, (3) source, or (4) user parameter to (a) clwarn.cgi, (b) clwarn.cgi.de_DE, (c) clwarn.cgi.en_EN, (d) clwarn.cgi.fr_FR, (e) clwarn.cgi.pt_BR, or (f) clwarn.cgi.ru_RU in cgi-bin/. |
| CVE-2012-3501 | Medium | 2012-08-25 | Not applicable | No public exploit | The squidclamav_check_preview_handler function in squidclamav.c in SquidClamav 5.x before 5.8 and 6.x before 6.7 passes an unescaped URL to a system command call, which allows remote attackers to cause a denial of service (daemon crash) via a URL with certain characters, as demonstrated using %0D or %0A. |
| CVE-2012-2213 | Medium | 2012-04-28 | Not applicable | No public exploit | Squid 3.1.9 allows remote attackers to bypass the access configuration for the CONNECT method by providing an arbitrary allowed hostname in the Host HTTP header. NOTE: this issue might not be reproducible, because the researcher is unable to provide a squid.conf file for a vulnerable system, and the observed behavior is consistent with a squid.conf file that was (perhaps inadvertently) designed to allow access based on a "req_header Host" acl regex that matches www.uol.com.br |
| CVE-2011-4096 | Medium | 2011-11-17 | Not applicable | No public exploit | The idnsGrokReply function in Squid before 3.1.16 does not properly free memory, which allows remote attackers to cause a denial of service (daemon abort) via a DNS reply containing a CNAME record that references another CNAME record that contains an empty A record. |
| CVE-2011-3205 | Medium | 2011-09-06 | Not applicable | No public exploit | Buffer overflow in the gopherToHTML function in gopher.cc in the Gopher reply parser in Squid 3.0 before 3.0.STABLE26, 3.1 before 3.1.15, and 3.2 before 3.2.0.11 allows remote Gopher servers to cause a denial of service (memory corruption and daemon restart) or possibly have unspecified other impact via a long line in a response. NOTE: This issue exists because of a CVE-2005-0094 regression. |
| CVE-2010-2951 | Medium | 2010-10-12 | Not applicable | No public exploit | dns_internal.cc in Squid 3.1.6, when IPv6 DNS resolution is not enabled, accesses an invalid socket during an IPv4 TCP DNS query, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via vectors that trigger an IPv4 DNS response with the TC bit set. |
| CVE-2010-3072 | Medium | 2010-09-20 | Not applicable | Forecast only | The string-comparison functions in String.cci in Squid 3.x before 3.1.8 and 3.2.x before 3.2.0.2 allow remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request. |
| CVE-2010-0639 | Medium | 2010-02-15 | Not applicable | No public exploit | The htcpHandleTstRequest function in htcp.c in Squid 2.x before 2.6.STABLE24 and 2.7 before 2.7.STABLE8, and htcp.cc in 3.0 before 3.0.STABLE24, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via crafted packets to the HTCP port. |
| CVE-2010-0308 | Medium | 2010-02-03 | Not applicable | No public exploit | lib/rfc1035.c in Squid 2.x, 3.0 through 3.0.STABLE22, and 3.1 through 3.1.0.15 allows remote attackers to cause a denial of service (assertion failure) via a crafted DNS packet that only contains a header. |
| CVE-2009-3826 | Medium | 2009-10-28 | Not applicable | No public exploit | Multiple buffer overflows in squidGuard 1.4 allow remote attackers to bypass intended URL blocking via a long URL, related to (1) the relationship between a certain buffer size in squidGuard and a certain buffer size in Squid and (2) a redirect URL that contains information about the originally requested URL. |
| CVE-2009-3700 | Medium | 2009-10-28 | Not applicable | No public exploit | Buffer overflow in sgLog.c in squidGuard 1.3 and 1.4 allows remote attackers to cause a denial of service (application hang or loss of blocking functionality) via a long URL with many / (slash) characters, related to "emergency mode." |
| CVE-2009-2855 | Medium | 2009-08-18 | Not applicable | No public exploit | The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers to cause a denial of service via a crafted auth header with certain comma delimiters that trigger an infinite loop of calls to the strcspn function. |
| CVE-2009-2622 | Medium | 2009-07-28 | Not applicable | Forecast only | Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 allows remote attackers to cause a denial of service via malformed requests including (1) "missing or mismatched protocol identifier," (2) missing or negative status value," (3) "missing version," or (4) "missing or invalid status number," related to (a) HttpMsg.cc and (b) HttpReply.cc. |
| CVE-2009-2621 | Medium | 2009-07-28 | Not applicable | No public exploit | Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 does not properly enforce "buffer limits and related bound checks," which allows remote attackers to cause a denial of service via (1) an incomplete request or (2) a request with a large header size, related to (a) HttpMsg.cc and (b) client_side.cc. |
| CVE-2009-0801 | Medium | 2009-03-04 | Not applicable | No public exploit | Squid, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header. |
| CVE-2009-0478 | Medium | 2009-02-08 | Not applicable | Working exploit published | Squid 2.7 to 2.7.STABLE5, 3.0 to 3.0.STABLE12, and 3.1 to 3.1.0.4 allows remote attackers to cause a denial of service via an HTTP request with an invalid version number, which triggers a reachable assertion in (1) HttpMsg.c and (2) HttpStatusLine.c. |
| CVE-2008-2897 | High | 2008-06-27 | Not applicable | Working exploit published | SQL injection vulnerability in index.php in PageSquid CMS 0.3 Beta allows remote attackers to execute arbitrary SQL commands via the page parameter. |
| CVE-2008-1922 | High | 2008-05-13 | Not applicable | No public exploit | Multiple stack-based buffer overflows in Sarg might allow attackers to execute arbitrary code via unknown vectors, probably a crafted Squid log file. |
| CVE-2008-1612 | Medium | 2008-04-01 | Not applicable | No public exploit | The arrayShrink function (lib/Array.c) in Squid 2.6.STABLE17 allows attackers to cause a denial of service (process exit) via unknown vectors that cause an array to shrink to 0 entries, which triggers an assert error. NOTE: this issue is due to an incorrect fix for CVE-2007-6239. |
| CVE-2008-1168 | Medium | 2008-03-05 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in Squid Analysis Report Generator (Sarg) 2.2.3.1 allows remote attackers to inject arbitrary web script or HTML via the User-Agent header, which is not properly handled when displaying the Squid proxy log. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. |
| CVE-2008-1167 | High | 2008-03-05 | Not applicable | No public exploit | Stack-based buffer overflow in the useragent function in useragent.c in Squid Analysis Report Generator (Sarg) 2.2.3.1 allows remote attackers to execute arbitrary code via a long Squid proxy server User-Agent header. NOTE: some of these details are obtained from third party information. |
| CVE-2007-6239 | Medium | 2007-12-04 | Not applicable | No public exploit | The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0 allows remote attackers to cause a denial of service (crash) via unknown vectors related to HTTP headers and an Array memory leak during requests for cached objects. |
| CVE-2007-4936 | High | 2007-09-18 | Not applicable | No public exploit | Unspecified vulnerability in Office Efficiencies SafeSquid 4.1.x has unknown impact and attack vectors, related to a "serious security flaw," possibly specific to Linux. |
| CVE-2007-1560 | Medium | 2007-03-21 | Not applicable | No public exploit | The clientProcessRequest() function in src/client_side.c in Squid 2.6 before 2.6.STABLE12 allows remote attackers to cause a denial of service (daemon crash) via crafted TRACE requests that trigger an assertion error. |
| CVE-2007-0248 | Medium | 2007-01-16 | Not applicable | No public exploit | The aclMatchExternal function in Squid before 2.6.STABLE7 allows remote attackers to cause a denial of service (crash) by causing an external_acl queue overload, which triggers an infinite loop. |
| CVE-2007-0247 | Medium | 2007-01-16 | Not applicable | Working exploit published | squid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of service (core dump) via crafted FTP directory listing responses, possibly related to the (1) ftpListingFinish and (2) ftpHtmlifyListEntry functions. |
| CVE-2005-3322 | Medium | 2005-10-27 | Not applicable | No public exploit | Unspecified vulnerability in Squid on SUSE Linux 9.0 allows remote attackers to cause a denial of service (crash) via HTTPs (SSL). |
| CVE-2005-3258 | Medium | 2005-10-20 | Not applicable | No public exploit | The rfc1738_do_escape function in ftp.c for Squid 2.5 STABLE11 and earlier allows remote FTP servers to cause a denial of service (segmentation fault) via certain "odd" responses. |
| CVE-2005-2917 | Medium | 2005-09-30 | Not applicable | No public exploit | Squid 2.5.STABLE10 and earlier, while performing NTLM authentication, does not properly handle certain request sequences, which allows attackers to cause a denial of service (daemon restart). |
| CVE-2005-2796 | Medium | 2005-09-07 | Not applicable | No public exploit | The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (segmentation fault) via certain crafted requests. |
| CVE-2005-2794 | Medium | 2005-09-07 | Not applicable | No public exploit | store.c in Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (crash) via certain aborted requests that trigger an assert error related to STORE_PENDING. |
| CVE-2005-1711 | High | 2005-05-24 | Not applicable | No public exploit | Gibraltar Firewall 2.2 and earlier, when using the ClamAV update to 0.81 for Squid, uses a defunct ClamAV method to scan memory for viruses, which does not return an error code and prevents viruses from being detected. |
| CVE-2005-1519 | Medium | 2005-05-11 | Not applicable | No public exploit | Squid 2.5 STABLE9 and earlier, when the DNS client port is unfiltered and the environment does not prevent IP spoofing, allows remote attackers to spoof DNS lookups. |
| CVE-2005-1345 | High | 2005-05-02 | Not applicable | No public exploit | Squid 2.5.STABLE9 and earlier does not trigger a fatal error when it identifies missing or invalid ACLs in the http_access configuration, which could lead to less restrictive ACLs than intended by the administrator. |
| CVE-2005-0813 | Medium | 2005-05-02 | Not applicable | No public exploit | Buffer overflow in Initial Redirect (ir) Squid Proxy Plug-In 0.1 and 0.2 may allow attackers to cause a denial of service and execute arbitrary code via unknown vectors. |
| CVE-2005-0446 | Medium | 2005-05-02 | Not applicable | No public exploit | Squid 2.5.STABLE8 and earlier allows remote attackers to cause a denial of service (crash) via certain DNS responses regarding (1) Fully Qualified Domain Names (FQDN) in fqdncache.c or (2) IP addresses in ipcache.c, which trigger an assertion failure. |
| CVE-2005-0241 | Medium | 2005-05-02 | Not applicable | Forecast only | The httpProcessReplyHeader function in http.c for Squid 2.5-STABLE7 and earlier does not properly set the debug context when it is handling "oversized" HTTP reply headers, which might allow remote attackers to poison the cache or bypass access controls based on header size. |
| CVE-2005-0211 | High | 2005-05-02 | Not applicable | No public exploit | Buffer overflow in wccp.c in Squid 2.5 before 2.5.STABLE7 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long WCCP packet, which is processed by a recvfrom function call that uses an incorrect length parameter. |
| CVE-2005-0194 | High | 2005-05-02 | Not applicable | No public exploit | Squid 2.5, when processing the configuration file, parses empty Access Control Lists (ACLs), including proxy_auth ACLs without defined auth schemes, in a way that effectively removes arguments, which could allow remote attackers to bypass intended ACLs if the administrator ignores the parser warnings. |
| CVE-2005-0173 | High | 2005-05-02 | Not applicable | No public exploit | squid_ldap_auth in Squid 2.5 and earlier allows remote authenticated users to bypass username-based Access Control Lists (ACLs) via a username with a space at the beginning or end, which is ignored by the LDAP server. |
| CVE-2005-0718 | Medium | 2005-04-14 | Not applicable | No public exploit | Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (segmentation fault) by aborting the connection during a (1) PUT or (2) POST request, which causes Squid to access previously freed memory. |
| CVE-2005-0626 | Low | 2005-03-08 | Not applicable | No public exploit | Race condition in Squid 2.5.STABLE7 to 2.5.STABLE9, when using the Netscape Set-Cookie recommendations for handling cookies in caches, may cause Set-Cookie headers to be sent to other users, which allows attackers to steal the related cookies. |
| CVE-2005-0175 | Medium | 2005-02-07 | Not applicable | No public exploit | Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache via an HTTP response splitting attack. |
| CVE-2005-0174 | Medium | 2005-02-07 | Not applicable | Forecast only | Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or conduct certain attacks via headers that do not follow the HTTP specification, including (1) multiple Content-Length headers, (2) carriage return (CR) characters that are not part of a CRLF pair, and (3) header names containing whitespace characters. |
| CVE-2004-0918 | Medium | 2005-01-27 | Not applicable | No public exploit | The asn_parse_header function (asn1.c) in the SNMP module for Squid Web Proxy Cache before 2.4.STABLE7 allows remote attackers to cause a denial of service (server restart) via certain SNMP packets with negative length fields that trigger a memory allocation error. |
| CVE-2005-0096 | Medium | 2005-01-25 | Not applicable | No public exploit | Memory leak in the NTLM fakeauth_auth helper for Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (memory consumption). |
| CVE-2005-0095 | Medium | 2005-01-15 | Not applicable | Forecast only | The WCCP message parsing code in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via malformed WCCP messages with source addresses that are spoofed to reference Squid's home router and invalid WCCP_I_SEE_YOU cache numbers. |
| CVE-2005-0094 | Medium | 2005-01-15 | Not applicable | No public exploit | Buffer overflow in the gopherToHTML function in the Gopher reply parser for Squid 2.5.STABLE7 and earlier allows remote malicious Gopher servers to cause a denial of service (crash) via crafted responses. |
| CVE-2005-0097 | Medium | 2005-01-11 | Not applicable | No public exploit | The NTLM component in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via a malformed NTLM type 3 message that triggers a NULL dereference. |
| CVE-2004-2654 | Medium | 2004-12-31 | Not applicable | No public exploit | The clientAbortBody function in client_side.c in Squid Web Proxy Cache before 2.6 STABLE6 allows remote attackers to cause a denial of service (segmentation fault) via unspecified vectors that trigger a null dereference. NOTE: in a followup advisory, a researcher claimed that the issue was a buffer overflow that was not fixed in STABLE6. However, the vendor's bug report clearly shows that the researcher later retracted this claim, because the tested product was actually STABLE5. |
| CVE-2004-2480 | Medium | 2004-12-31 | Not applicable | Working exploit published | Squid Web Proxy Cache 2.3.STABLE5 allows remote attackers to bypass security controls and access arbitrary websites via "@@" sequences in a URL within Internet Explorer. |
| CVE-2004-2479 | Medium | 2004-12-31 | Not applicable | No public exploit | Squid Web Proxy Cache 2.5 might allow remote attackers to obtain sensitive information via URLs containing invalid hostnames that cause DNS operations to fail, which results in references to previously used error messages. |
| CVE-2004-0832 | Medium | 2004-11-03 | Not applicable | No public exploit | The (1) ntlm_fetch_string and (2) ntlm_get_string functions in Squid 2.5.6 and earlier, with NTLM authentication enabled, allow remote attackers to cause a denial of service (application crash) via an NTLMSSP packet that causes a negative value to be passed to memcpy. |
| CVE-2004-0541 | High | 2004-08-06 | Not applicable | Working exploit published | Buffer overflow in the ntlm_check_auth (NTLM authentication) function for Squid Web Proxy Cache 2.5.x and 3.x, when compiled with NTLM handlers enabled, allows remote attackers to execute arbitrary code via a long password ("pass" variable). |
| CVE-2004-0189 | High | 2004-03-15 | Not applicable | Working exploit published | The "%xx" URL decoding function in Squid 2.5STABLE4 and earlier allows remote attackers to bypass url_regex ACLs via a URL with a NULL ("%00") character, which causes Squid to use only a portion of the requested URL when comparing it against the access control lists. |
| CVE-2002-2414 | Medium | 2002-12-31 | Not applicable | No public exploit | Opera 6.0.3, when using Squid 2.4 for HTTPS proxying, does not properly handle when accepting a non-global certificate authority (CA) certificate from a site and establishing a subsequent HTTPS connection, which allows remote attackers to cause a denial of service (crash). |
| CVE-2002-2175 | Medium | 2002-12-31 | Not applicable | No public exploit | phpSquidPass before 0.2 uses an incomplete regular expression to find a matching username in its database, which allows remote authenticated attackers to effectively delete other usernames via a short username that matches the end of the targeted username. |
| CVE-2002-0735 | High | 2002-08-12 | Not applicable | No public exploit | Format string vulnerability in the logging() function in C-Note Squid LDAP authentication module (squid_auth_LDAP) 2.0.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code by triggering log messages. |
| CVE-2002-0715 | Medium | 2002-07-26 | Not applicable | No public exploit | Vulnerability in Squid before 2.4.STABLE6 related to proxy authentication credentials may allow remote web sites to obtain the user's proxy login and password. |
| CVE-2002-0714 | High | 2002-07-26 | Not applicable | No public exploit | FTP proxy in Squid before 2.4.STABLE6 does not compare the IP addresses of control and data connections with the FTP server, which allows remote attackers to bypass firewall rules or spoof FTP server responses. |
| CVE-2002-0713 | High | 2002-07-26 | Not applicable | No public exploit | Buffer overflows in Squid before 2.4.STABLE6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code (1) via the MSNT auth helper (msnt_auth) when using denyusers or allowusers files, (2) via the gopher client, or (3) via the FTP server directory listing parser when HTML output is generated. |
| CVE-2002-0163 | High | 2002-03-26 | Not applicable | Working exploit published | Heap-based buffer overflow in Squid before 2.4 STABLE4, and Squid 2.5 and 2.6 until March 12, 2002 distributions, allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via compressed DNS responses. |
| CVE-2002-0069 | Low | 2002-03-08 | Not applicable | No public exploit | Memory leak in SNMP in Squid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of service. |
| CVE-2002-0068 | High | 2002-03-08 | Not applicable | Working exploit published | Squid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of service (core dump) and possibly execute arbitrary code with an ftp:// URL with a larger number of special characters, which exceed the buffer when Squid URL-escapes the characters. |
| CVE-2002-0067 | High | 2002-03-08 | Not applicable | No public exploit | Squid 2.4 STABLE3 and earlier does not properly disable HTCP, even when "htcp_port 0" is specified in squid.conf, which could allow remote attackers to bypass intended access restrictions. |
| CVE-2001-0843 | Medium | 2001-12-06 | Not applicable | No public exploit | Squid proxy server 2.4 and earlier allows remote attackers to cause a denial of service (crash) via a mkdir-only FTP PUT request. |
| CVE-2001-1030 | High | 2001-07-18 | Not applicable | No public exploit | Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists (ACLs) when the httpd_accel_host and http_accel_with_proxy off settings are used, which allows attackers to bypass the ACLs and conduct unauthorized activities such as port scanning. |
| CVE-2001-0142 | Low | 2001-03-12 | Not applicable | No public exploit | squid 2.3 and earlier allows local users to overwrite arbitrary files via a symlink attack in some configurations. |
| CVE-1999-1481 | Medium | 1999-12-31 | Not applicable | Working exploit published | Squid 2.2.STABLE5 and below, when using external authentication, allows attackers to bypass access controls via a newline in the user/password pair. |
| CVE-1999-1273 | High | 1998-02-20 | Not applicable | No public exploit | Squid Internet Object Cache 1.1.20 allows users to bypass access control lists (ACLs) by encoding the URL with hexadecimal escape sequences. |