Lucene search

FreeBSD81D9DC0C-1988-11DF-8E66-0019996BC1F7

HistoryFeb 12, 2010 - 12:00 a.m.

squid -- Denial of Service vulnerability in HTCP

2010-02-1200:00:00

vuxml.freebsd.org

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.943 High

EPSS

Percentile

99.2%

JSON

Squid security advisory 2010:2 reports:

Due to incorrect processing Squid is vulnerable to a
denial of service attack when receiving specially crafted
HTCP packets.
This problem allows any machine to perform a denial
of service attack on the Squid service when its HTCP port
is open.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchsquid= 2.7.1UNKNOWN
FreeBSDanynoarchsquid< 2.7.7_4UNKNOWN

OS	Version	Architecture	Package	Version	Filename
FreeBSD	any	noarch	squid	= 2.7.1	UNKNOWN
FreeBSD	any	noarch	squid	< 2.7.7_4	UNKNOWN

References

www.squid-cache.org/Advisories/SQUID-2010_2.txt

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.943 High

EPSS

Percentile

99.2%

JSON

Related for 81D9DC0C-1988-11DF-8E66-0019996BC1F7