CVE

Id
77050  
CVE No.
CVE-2014-9749  
Status
Candidate  
Description
Squid 3.4.4 through 3.4.11 and 3.5.0.1 through 3.5.1, when Digest authentication is used, allow remote authenticated users to retain access by leveraging a stale nonce, aka "Nonce replay vulnerability."  
Phase
Assigned (20151004)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
706837 77050 CVE-2014-9749 MLIST:[oss-security] 20151001 CVE Request: squid: Nonce replay vulnerability in Digest authentication  View
706838 77050 CVE-2014-9749 URL:http://www.openwall.com/lists/oss-security/2015/10/01/1  View
706839 77050 CVE-2014-9749 MLIST:[oss-security] 20151011 Re: CVE Request: squid: Nonce replay vulnerability in Digest authentication  View
706840 77050 CVE-2014-9749 URL:http://www.openwall.com/lists/oss-security/2015/10/11/4  View
706841 77050 CVE-2014-9749 MLIST:[oss-security] 20151012 Re: Re: CVE Request: squid: Nonce replay vulnerability in Digest authentication  View
706842 77050 CVE-2014-9749 URL:http://www.openwall.com/lists/oss-security/2015/10/12/2  View
706843 77050 CVE-2014-9749 CONFIRM:http://bugs.squid-cache.org/show_bug.cgi?id=4066  View
706844 77050 CVE-2014-9749 SUSE:openSUSE-SU-2015:1835  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
689 JVNDB-2016-001462 Atlassian Bamboo で使用される Ignite Realtime Smack XMPP API における任意の Java コードを実行される脆弱性 Atlassian Bamboo で使用される Ignite Realtime Smack XMPP API には、任意の Java コードを実行される脆弱性が存在します。 CVE-2014-9757 77050 7.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001462.html  View