From a75a335d97a57e695d53f30e8217eaae4077c73e Mon Sep 17 00:00:00 2001 From: Jacques Vidrine Date: Fri, 26 Mar 2004 15:29:13 +0000 Subject: [PATCH] Add squid ACL bypass. Add xine temporary file handling issue. [1] Submitted by: Frankye Fattarelli [1] --- security/vuxml/vuln.xml | 56 +++++++++++++++++++++++++++++++++++++++++ 1 file changed, 56 insertions(+) diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 1825de65f253..64f7af596085 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -32,6 +32,62 @@ EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. "http://www.vuxml.org/dtd/vuxml-1/vuxml-10.dtd"> + + + + + squid + squid-2.5.5 + + + + +

From the Squid advisory:

+
+

Squid versions 2.5.STABLE4 and earlier contain a bug + in the "%xx" URL decoding function. It may insert a NUL + character into decoded URLs, which may allow users to bypass + url_regex ACLs.

+
+ + + + http://www.squid-cache.org/Advisories/SQUID-2004_1.txt + CVE-2004-0189 + + + 2004-02-29 + 2004-03-26 + + + + + insecure temporary file creation in xine-check, + xine-bugreport + + + xine + 0 + + + + +

Some scripts installed with xine create temporary files + insecurely. It is recommended that these scripts (xine-check, + xine-bugreport) not be used. They are not needed for normal + operation.

+ + + + http://marc.theaimsgroup.com/?l=bugtraq&m=107997911025558 + + + 2004-03-20 + 2004-03-26 + + + multiple vulnerabilities in phpBB