Squid proxy server DoS
Published:		20.09.2010
Source:		BUGTRAQ
SecurityVulns ID:		11158
Type:		remote
Level:		6/10
Description:		Crash on request with empty header strings.

Affected:		SQUID : squid 3.1
CVE:		CVE-2010-3072 (The string-comparison functions in String.cci in Squid 3.x before 3.1.8 and 3.2.x before 3.2.0.2 allow remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request.)

Original document

DEBIAN, [SECURITY] [DSA 2111-1] New squid3 packages fix denial of service (20.09.2010)

Discuss:

Read or add your comments to this news (0 comments)