Approved changes feed: RSS · Atom
cpe:2.3:a:squid:squid:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Squid (9786aba4-bb5c-533f-8bac-ba68903a8677) |
|---|---|
| Product | Squid (64869af5-807b-5058-9ba3-08565b79d416) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/squid-cache/squid |
purl2cpe | 2026-06-01 10:16:52.886605 |
pkg:gitlab/redhat/squid |
purl2cpe | 2026-06-01 10:16:52.886606 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2005-2917 |
vulnerable | 2026-06-08 04:48:30.850159 |
Details available
Squid 2.5.STABLE10 and earlier, while performing NTLM authentication, does not properly handle certain request sequences, which allows attackers to cause a denial of service (daemon restart).
Published: 2005-09-30T04:00:00.000Z
Updated: 2024-08-07T22:53:29.996Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-1519 |
vulnerable | 2026-06-08 04:48:26.819640 |
Details available
Squid 2.5 STABLE9 and earlier, when the DNS client port is unfiltered and the environment does not prevent IP spoofing, allows remote attackers to spoof DNS lookups.
Published: 2005-05-11T04:00:00.000Z
Updated: 2024-08-07T21:51:50.272Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-0832 |
vulnerable | 2026-06-08 04:47:51.583944 |
Details available
The (1) ntlm_fetch_string and (2) ntlm_get_string functions in Squid 2.5.6 and earlier, with NTLM authentication enabled, allow remote attackers to cause a denial of service (application crash) via an NTLMSSP packet that causes a negative value to be passed to memcpy.
Published: 2004-09-28T04:00:00.000Z
Updated: 2024-08-08T00:31:47.584Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-0715 |
vulnerable | 2026-06-08 04:46:22.082602 |
Details available
Vulnerability in Squid before 2.4.STABLE6 related to proxy authentication credentials may allow remote web sites to obtain the user's proxy login and password.
Published: 2002-07-23T04:00:00.000Z
Updated: 2024-08-08T02:56:38.734Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-0714 |
vulnerable | 2026-06-08 04:46:22.082257 |
Details available
FTP proxy in Squid before 2.4.STABLE6 does not compare the IP addresses of control and data connections with the FTP server, which allows remote attackers to bypass firewall rules or spoof FTP server responses.
Published: 2003-04-02T05:00:00.000Z
Updated: 2024-08-08T02:56:38.804Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-0713 |
vulnerable | 2026-06-08 04:46:22.081857 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-0163 |
vulnerable | 2026-06-08 04:46:20.792602 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-0069 |
vulnerable | 2026-06-08 04:46:20.556316 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-0068 |
vulnerable | 2026-06-08 04:46:20.555711 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-0067 |
vulnerable | 2026-06-08 04:46:20.554926 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.