Squid: >> Squid >> 2.5.stable9 Security Vulnerabilities
The rfc1738_do_escape function in ftp.c for Squid 2.5 STABLE11 and earlier allows remote FTP servers to cause a denial of service (segmentation fault) via certain "odd" responses.
CVSS Score
5.0
EPSS Score
0.338
Published
2005-10-20
store.c in Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (crash) via certain aborted requests that trigger an assert error related to STORE_PENDING.
CVSS Score
5.0
EPSS Score
0.125
Published
2005-09-07
The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (segmentation fault) via certain crafted requests.
CVSS Score
5.0
EPSS Score
0.151
Published
2005-09-07
Squid 2.5.STABLE9 and earlier does not trigger a fatal error when it identifies missing or invalid ACLs in the http_access configuration, which could lead to less restrictive ACLs than intended by the administrator.
CVSS Score
7.5
EPSS Score
0.002
Published
2005-05-02