squid proxy server DoS updated since 06.12.2007
Published:		12.12.2007
Source:		BUGTRAQ
SecurityVulns ID:		8419
Type:		remote
Level:		6/10
Description:		Invalid cash update reply processing.

Affected:		SQUID : Squid 2.6
CVE:		CVE-2007-6239 (The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0 allows remote attackers to cause a denial of service (crash) via unknown vectors related to HTTP headers.)

Original document		Martin Huter, squids ICAP implementation lacks a defer check when reading from ICAP server (12.12.2007)
		SQUID, SQUID-2007:2, Dec 4, 2007 (06.12.2007)

Discuss:

Read or add your comments to this news (0 comments)