Lucene search

K
osvGoogleOSV:DSA-688-1
HistoryFeb 23, 2005 - 12:00 a.m.

squid - mising input sanitising

2005-02-2300:00:00
Google
osv.dev
6

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

Upstream developers have discovered several problems in squid, the
Internet object cache, the popular WWW proxy cache. A remote attacker
can cause squid to crash via certain DNS responses.

For the stable distribution (woody) these problems have been fixed in
version 2.4.6-2woody7.

For the unstable distribution (sid) these problems have been fixed in
version 2.5.8-3.

We recommend that you upgrade your squid package.

CPENameOperatorVersion
squideq2.4.6-2woody4

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P