Lucene search

K
cve[email protected]CVE-2004-2654
HistoryFeb 24, 2006 - 11:00 a.m.

CVE-2004-2654

2006-02-2411:00:00
web.nvd.nist.gov
28
squid
web proxy cache
denial of service
cve-2004-2654
segmentation fault
buffer overflow
security vulnerability

7.1 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.056 Low

EPSS

Percentile

93.3%

The clientAbortBody function in client_side.c in Squid Web Proxy Cache before 2.6 STABLE6 allows remote attackers to cause a denial of service (segmentation fault) via unspecified vectors that trigger a null dereference. NOTE: in a followup advisory, a researcher claimed that the issue was a buffer overflow that was not fixed in STABLE6. However, the vendor’s bug report clearly shows that the researcher later retracted this claim, because the tested product was actually STABLE5.

Affected configurations

NVD
Node
squidsquidMatch2.5_stable5
CPENameOperatorVersion
squid:squidsquideq2.5_stable5

7.1 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.056 Low

EPSS

Percentile

93.3%

Related for CVE-2004-2654