CVE

Id
91372  
CVE No.
CVE-2016-4553  
Status
Candidate  
Description
client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct cache-poisoning attacks via an HTTP request.  
Phase
Assigned (20160506)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
784825 91372 CVE-2016-4553 CONFIRM:http://bugs.squid-cache.org/show_bug.cgi?id=4501  View
784826 91372 CVE-2016-4553 CONFIRM:http://www.squid-cache.org/Advisories/SQUID-2016_7.txt  View
784827 91372 CVE-2016-4553 CONFIRM:http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-14039.patch  View
784828 91372 CVE-2016-4553 CONFIRM:http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html  View
784829 91372 CVE-2016-4553 DEBIAN:DSA-3625  View
784830 91372 CVE-2016-4553 URL:http://www.debian.org/security/2016/dsa-3625  View
784831 91372 CVE-2016-4553 GENTOO:GLSA-201607-01  View
784832 91372 CVE-2016-4553 URL:https://security.gentoo.org/glsa/201607-01  View
784833 91372 CVE-2016-4553 REDHAT:RHSA-2016:1139  View
784834 91372 CVE-2016-4553 URL:https://access.redhat.com/errata/RHSA-2016:1139  View
784835 91372 CVE-2016-4553 REDHAT:RHSA-2016:1140  View
784836 91372 CVE-2016-4553 URL:https://access.redhat.com/errata/RHSA-2016:1140  View
784837 91372 CVE-2016-4553 SUSE:openSUSE-SU-2016:2081  View
784838 91372 CVE-2016-4553 URL:http://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html  View
784839 91372 CVE-2016-4553 SUSE:SUSE-SU-2016:1996  View
784840 91372 CVE-2016-4553 URL:http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html  View
784841 91372 CVE-2016-4553 SUSE:SUSE-SU-2016:2089  View
784842 91372 CVE-2016-4553 URL:http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html  View
784843 91372 CVE-2016-4553 UBUNTU:USN-2995-1  View
784844 91372 CVE-2016-4553 URL:http://www.ubuntu.com/usn/USN-2995-1  View
784845 91372 CVE-2016-4553 SECTRACK:1035768  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
178 JVNDB-2016-000185 サイボウズ Office のプロジェクト機能に関するクロスサイトスクリプティングの脆弱性 サイボウズ株式会社が提供するサイボウズ Office には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2016-4866 91372 4 4.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-000185.html  View