PT-2005-3770 · Squid+1 · Squid+2

Publicado 2005-09-30 · Atualizado 2017-10-11 · CVE-2005-2917

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Squid versions 2.5.STABLE10 and earlier

Description The issue occurs during NTLM authentication, where certain request sequences are not properly handled, allowing attackers to cause a denial of service, which results in the daemon restarting.

Recommendations For Squid versions 2.5.STABLE10 and earlier, consider updating to a newer version to resolve the issue.

Correção

Identificadores relacionados

CVE-2005-2917

DSA-828-1

RHSA-2006:0045

RHSA-2006:0052

RHSA-2006_0052

Produtos afetados

Red Hat

Squid

Squid Cache

Referências · 27

• http://secunia.com/advisories/19532 · Nota
• ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt · Aviso do Fabricante
• http://redhat.com/support/errata/RHSA-2006-0045.html · Aviso do Fabricante
• http://debian.org/security/2005/dsa-828 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24282 · Nota
• http://secunia.com/advisories/17050 · Nota
• https://access.redhat.com/errata/RHSA-2006:0052 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11580 · Nota
• http://secunia.com/advisories/17015 · Nota
• http://novell.com/linux/security/advisories/2005_27_sr.html · Aviso do Fabricante
• http://ubuntu.com/usn/usn-192-1 · Aviso do Fabricante
• http://mandriva.com/security/advisories?name=MDKSA-2005:181 · Aviso do Fabricante
• http://fedoranews.org/updates/FEDORA--.shtml · Aviso do Fabricante
• http://secunia.com/advisories/17177 · Nota
• http://osvdb.org/19607 · Nota