PT-2005-1202 · Squid+1 · Squid+2
Infamous41Md
·
Publicado
2005-01-15
·
Atualizado
2017-10-11
·
CVE-2005-0094
CVSS v2.0
5.0
Média
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
Squid versions 2.5.STABLE7 and earlier
Description
The issue is related to a buffer overflow in the
gopherToHTML function within the Gopher reply parser. This allows remote malicious Gopher servers to cause a denial of service by crashing the system through crafted responses.Recommendations
For Squid versions 2.5.STABLE7 and earlier, consider updating to a version that fixes this issue as a permanent solution. As a temporary workaround, restrict access to Gopher servers to minimize the risk of exploitation.
Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Red Hat
Squid
Squid Cache