PT-2004-3544 · Squid · Squid Web Proxy Cache+1

Publicado 2004-12-31 · Atualizado 2008-09-05 · CVE-2004-2654

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Squid Web Proxy Cache versions prior to 2.6 STABLE6

Description The issue allows remote attackers to cause a denial of service, resulting in a segmentation fault. This is achieved through unspecified vectors that trigger a null dereference. Initial claims suggested a buffer overflow, but this was later retracted by the researcher.

Recommendations For Squid Web Proxy Cache versions prior to 2.6 STABLE6, update to version 2.6 STABLE6 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2004-2654

Produtos afetados

Squid Cache

Squid Web Proxy Cache

Referências · 12

• http://squid-cache.org/bugs/show_bug.cgi?id=972 · Nota
• http://securitylab.ru/47881.html · Nota
• http://attrition.org/pipermail/vim/2006-February/000570.html · Nota
• http://secunia.com/advisories/12754 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2004-2654 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2004-2654 · Nota de Segurança
• http://securitytracker.com/id?1011214 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-2654 · Nota
• http://osvdb.org/9801 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-2654 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2004-2654 · Aviso do Fabricante
• http://secunia.com/advisories/12508 · Aviso do Fabricante