[SECURITY] [DSA-2002-1] New polipo packages fix denial of service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-2002-1 [email protected] http://www.debian.org/security/ Stefan Fritsch February 19, 2010 http://www.debian.org/security/faq -...

CVE-2009-4413

The httpClientDiscardBody function in client.c in Polipo 0.9.8, 0.9.12, 1.0.4, and possibly other versions, allows remote attackers to cause a denial of service crash via a request with a large Content-Length value, which triggers an integer overflow, a signed-to-unsigned conversion error with a...

CVE-2009-4413

CVE-2009-4413 affects the Polipo web proxy. The issue resides in httpClientDiscardBody in client.c, present in Polipo versions such as 0.9.8, 0.9.12, and 1.0.4. A crafted remote request with a large Content-Length triggers an integer overflow and a signed-to-unsigned conversion error, leading to ...

Polipo Malformed HTTP GET Request Memory Corruption Vulnerability

Polipo is prone to a memory-corruption vulnerability. Successful exploits may allow remote attackers to execute arbitrary code within the context of the affected application or crash the application, denying service to legitimate users. Polipo 0.9.8 and 1.0.4 are vulnerable; other versions may al...