CVSS: 5.0EPSS: 11%CPEs: 61EXPL: 0CVE-2005-2796
https://notcve.org/view.php?id=CVE-2005-2796
The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (segmentation fault) via certain crafted requests. • http://fedoranews.org/updates/FEDORA--.shtml http://secunia.com/advisories/16977 http://secunia.com/advisories/17027 http://securitytracker.com/id?1014846 http://www.debian.org/security/2005/dsa-809 http://www.gentoo.org/security/en/glsa/glsa-200509-06.xml http://www.mandriva.com/security/advisories?name=MDKSA-2005:162 http://www.novell.com/linux/security/advisories/2005_21_sr.html http://www.novell.com/linux/security/advisories/2005_53_squid.html http://www.redhat •
CVSS: 5.0EPSS: 10%CPEs: 42EXPL: 0CVE-2005-2794
https://notcve.org/view.php?id=CVE-2005-2794
store.c in Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (crash) via certain aborted requests that trigger an assert error related to STORE_PENDING. • http://fedoranews.org/updates/FEDORA--.shtml http://secunia.com/advisories/16977 http://secunia.com/advisories/17027 http://www.debian.org/security/2005/dsa-809 http://www.gentoo.org/security/en/glsa/glsa-200509-06.xml http://www.mandriva.com/security/advisories?name=MDKSA-2005:162 http://www.novell.com/linux/security/advisories/2005_21_sr.html http://www.novell.com/linux/security/advisories/2005_53_squid.html http://www.redhat.com/support/errata/RHSA-2005-766.html •
CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 0CVE-2005-1711
https://notcve.org/view.php?id=CVE-2005-1711
Gibraltar Firewall 2.2 and earlier, when using the ClamAV update to 0.81 for Squid, uses a defunct ClamAV method to scan memory for viruses, which does not return an error code and prevents viruses from being detected. • http://securitytracker.com/id?1014030 •
CVSS: 6.4EPSS: 33%CPEs: 1EXPL: 0CVE-2005-1519
https://notcve.org/view.php?id=CVE-2005-1519
Squid 2.5 STABLE9 and earlier, when the DNS client port is unfiltered and the environment does not prevent IP spoofing, allows remote attackers to spoof DNS lookups. • http://fedoranews.org/updates/FEDORA--.shtml http://secunia.com/advisories/15294 http://www.debian.org/security/2005/dsa-751 http://www.redhat.com/archives/fedora-announce-list/2005-May/msg00025.html http://www.redhat.com/support/errata/RHSA-2005-489.html http://www.securityfocus.com/bid/13592 http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE9-dns_query http://www.vupen.com/english/advisories/2005/0521 https://oval.cisecurity.org/repository/search •
CVSS: 7.5EPSS: 1%CPEs: 9EXPL: 0CVE-2005-1345
https://notcve.org/view.php?id=CVE-2005-1345
Squid 2.5.STABLE9 and earlier does not trigger a fatal error when it identifies missing or invalid ACLs in the http_access configuration, which could lead to less restrictive ACLs than intended by the administrator. • http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000948 http://fedoranews.org/updates/FEDORA--.shtml http://www.debian.org/security/2005/dsa-721 http://www.redhat.com/support/errata/RHSA-2005-415.html http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE9-acl_error http://www.squid-cache.org/bugs/show_bug.cgi?id=1255 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10513 https://access.redhat.com/security&#x •