PT-2014-3489

Name of the Vulnerable Software and Affected Versions Squid versions 3.1 through 3.3.11 Squid versions 3.4 through 3.4.3 Description The issue allows remote attackers to cause a denial of service, resulting in an assertion failure, via a crafted range request when SSL-Bump is enabled. This is...

Squid SSL-Bump HTTPS请求处理拒绝服务漏洞

CVE ID:CVE-2014-0128 Squid Cache简称为Squid是一个流行的代理服务器和Web缓存服务器软件。 Squid SSL-Bump中相关状态管理处理存在错误，允许攻击者提交特制的HTTP请求触发断言错误，造成拒绝服务攻击。 0 Squid 3.x 厂商补丁： Squid ----- Squid 3.3.12或3.4.4已经修复该漏洞，建议用户下载更新： http://www.squid-cache.org...