CVE-2015-5400

6.8

MEDIUMCVSS v2

Published

September 28, 2015

Affected

7 projects

Assigned by

MITRE

Severity scale

010

Description

Squid before 3.5.6 does not properly handle CONNECT method peer responses when configured with cache_peer, which allows remote attackers to bypass intended restrictions and gain access to a backend proxy via a CONNECT request.

squid-cache/squid

GitHubSquid Web Proxy Cache - Source Code

<= 3.5.2NVD

squid

NPMProvides SQL tagged template strings and a schema definition function.

<= 3.5.2NVD

squid

RubyGems

More on this CVE

NVD↗GitHub Advisory↗

Squid expands Prawn providing method to easily draw graphs in PDF files.

<= 3.5.2NVD

nullscreen/squid

GitHubA Ruby library to plot charts in PDF files

<= 3.5.2NVD

fedora

NPMDigital Repository Ireland - fedora backend operations

= 22NVD

fedora

RubyGemsSet of capistrano recipies for automating creation of Fedora servers.

= 22NVD

claudiob/squid

GitHubA Ruby library to plot charts in PDF files

<= 3.5.2NVD

Security Advisories

CVE-2015-5400

Description

More on this CVE