National Science Foundation Squid Web Proxy vulnerabilities

3 known vulnerabilities affecting national_science_foundation/squid_web_proxy.

Total CVEs

3

CISA KEV

0

Public exploits

1

Exploited in wild

0

Severity breakdown

HIGH1MEDIUM1LOW1

Vulnerabilities

Page 1 of 1

CVE-2001-0142LOWCVSS 1.2v2.3_stable42001-03-12

CVE-2001-0142 [LOW] CVE-2001-0142: squid 2.3 and earlier allows local users to overwrite arbitrary files via a symlink attack in some c squid 2.3 and earlier allows local users to overwrite arbitrary files via a symlink attack in some configurations.

CVE-1999-1481MEDIUMCVSS 5.0PoCv1.0v1.0novm+3 more1999-12-31

CVE-1999-1481 [MEDIUM] CVE-1999-1481: Squid 2.2.STABLE5 and below, when using external authentication, allows attackers to bypass access c Squid 2.2.STABLE5 and below, when using external authentication, allows attackers to bypass access controls via a newline in the user/password pair.

CVE-1999-1273HIGHCVSS 7.5v1.1.201998-02-20

CVE-1999-1273 [HIGH] CVE-1999-1273: Squid Internet Object Cache 1.1.20 allows users to bypass access control lists (ACLs) by encoding th Squid Internet Object Cache 1.1.20 allows users to bypass access control lists (ACLs) by encoding the URL with hexadecimal escape sequences.