CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 0CVE-2005-1711
https://notcve.org/view.php?id=CVE-2005-1711
Gibraltar Firewall 2.2 and earlier, when using the ClamAV update to 0.81 for Squid, uses a defunct ClamAV method to scan memory for viruses, which does not return an error code and prevents viruses from being detected. • http://securitytracker.com/id?1014030 •
CVSS: 6.4EPSS: 33%CPEs: 1EXPL: 0CVE-2005-1519
https://notcve.org/view.php?id=CVE-2005-1519
Squid 2.5 STABLE9 and earlier, when the DNS client port is unfiltered and the environment does not prevent IP spoofing, allows remote attackers to spoof DNS lookups. • http://fedoranews.org/updates/FEDORA--.shtml http://secunia.com/advisories/15294 http://www.debian.org/security/2005/dsa-751 http://www.redhat.com/archives/fedora-announce-list/2005-May/msg00025.html http://www.redhat.com/support/errata/RHSA-2005-489.html http://www.securityfocus.com/bid/13592 http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE9-dns_query http://www.vupen.com/english/advisories/2005/0521 https://oval.cisecurity.org/repository/search •
CVSS: 7.5EPSS: 1%CPEs: 9EXPL: 0CVE-2005-1345
https://notcve.org/view.php?id=CVE-2005-1345
Squid 2.5.STABLE9 and earlier does not trigger a fatal error when it identifies missing or invalid ACLs in the http_access configuration, which could lead to less restrictive ACLs than intended by the administrator. • http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000948 http://fedoranews.org/updates/FEDORA--.shtml http://www.debian.org/security/2005/dsa-721 http://www.redhat.com/support/errata/RHSA-2005-415.html http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE9-acl_error http://www.squid-cache.org/bugs/show_bug.cgi?id=1255 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10513 https://access.redhat.com/security&#x •
CVSS: 5.0EPSS: 7%CPEs: 58EXPL: 0CVE-2005-0718
https://notcve.org/view.php?id=CVE-2005-0718
Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (segmentation fault) by aborting the connection during a (1) PUT or (2) POST request, which causes Squid to access previously freed memory. • http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000931 http://fedoranews.org/updates/FEDORA--.shtml http://secunia.com/advisories/12508 http://www.redhat.com/support/errata/RHSA-2005-415.html http://www.redhat.com/support/errata/RHSA-2005-489.html http://www.securityfocus.com/bid/13166 http://www.squid-cache.org/bugs/show_bug.cgi?id=1224 http://www1.uk.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-post https://exchange.xforce.ibmcloud.co •
CVSS: 2.6EPSS: 0%CPEs: 3EXPL: 0CVE-2005-0626
https://notcve.org/view.php?id=CVE-2005-0626
Race condition in Squid 2.5.STABLE7 to 2.5.STABLE9, when using the Netscape Set-Cookie recommendations for handling cookies in caches, may cause Set-Cookie headers to be sent to other users, which allows attackers to steal the related cookies. • http://fedoranews.org/updates/FEDORA--.shtml http://www.redhat.com/support/errata/RHSA-2005-415.html http://www.securityfocus.com/bid/12716 http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE9-setcookie https://exchange.xforce.ibmcloud.com/vulnerabilities/19581 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11169 https://usn.ubuntu.com/93-1 https://access.redhat.com/security/cve/CVE-2005-0626 https://bugzilla.redhat.co •