Vulnerabilities

TI-2009-00761 CVE-2009-0801 · GHSA-w87g-c2c7-4fx5

Squid, when transparent interception mode is enabled, uses the HTTP Host header to…

LOW 30

Squid, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other t…

CVSS 2.0MEDIUM 5.4 Network No auth Interaction — EPSS 0.03089 Published 2009-03-04 Will not fix CWE-264

TI-2007-05954 CVE-2007-6239 · GHSA-6pw6-cgf2-h2v8

The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and…

MEDIUM 45

The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0 allows remote attackers to cause a denial of service (crash) via unknown vectors related to HTTP headers and an Array memor…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.26659 Published 2007-12-04 Fixed CWE-20

Vulnerabilities

Filters

Squid, when transparent interception mode is enabled, uses the HTTP Host header to…

The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and…