Lucene search

K
freebsdFreeBSD5FE7E27A-64CB-11D9-9E1E-C296AC722CB3
HistoryJan 07, 2005 - 12:00 a.m.

squid -- denial of service with forged WCCP messages

2005-01-0700:00:00
vuxml.freebsd.org
26

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.97 High

EPSS

Percentile

99.7%

The squid patches page notes:

WCCP_I_SEE_YOU messages contain a ‘number of caches’
field which should be between 1 and 32. Values outside
that range may crash Squid if WCCP is enabled, and if an
attacker can spoof UDP packets with the WCCP router’s IP
address.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchsquid< 2.5.7_6UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.97 High

EPSS

Percentile

99.7%