PT-2007-7533 · Squid · Squid+1

David Duncan Ross Palmer + 1 · Publicado 1970-01-01 · Atualizado 2017-07-29 · CVE-2007-0247

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Squid versions prior to 2.6.STABLE7

Description The issue concerns multiple vulnerabilities in the Squid package that can lead to a disruption in the availability of protected information. These vulnerabilities can be exploited remotely, potentially causing a denial of service. Specifically, the ftpListingFinish and ftpHtmlifyListEntry functions in squid/src/ftp.c are affected, allowing remote FTP servers to cause a core dump via crafted FTP directory listing responses.

Recommendations For Squid versions prior to 2.6.STABLE7, update to version 2.6.STABLE7 or later to resolve the issue. As a temporary workaround, consider restricting access to the ftpListingFinish and ftpHtmlifyListEntry functions until a patch is available.

Exploit

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

BDU:2015-04631

BDU:2015-04955

CVE-2007-0247

Produtos afetados

Squid

Squid Cache

Referências · 28

• 🔥 https://exploit-db.com/exploits/29473 · Exploit
• https://bdu.fstec.ru/vul/2015-04631 · Nota de Segurança
• http://secunia.com/advisories/23810 · Aviso do Fabricante
• http://secunia.com/advisories/23921 · Aviso do Fabricante
• http://ubuntu.com/usn/usn-414-1 · Aviso do Fabricante
• http://vupen.com/english/advisories/2007/0199 · Aviso do Fabricante
• http://trustix.org/errata/2007/0003 · Aviso do Fabricante
• http://fedoranews.org/cms/node/2442 · Aviso do Fabricante
• http://squid-cache.org/Versions/v2/2.6/squid-2.6.STABLE7-RELEASENOTES.html#s12 · Nota
• http://secunia.com/advisories/23837 · Aviso do Fabricante
• http://secunia.com/advisories/23889 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2007-0247 · Aviso do Fabricante
• http://secunia.com/advisories/23767 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2007-0247 · Aviso do Fabricante
• http://novell.com/linux/security/advisories/2007_12_squid.html · Aviso do Fabricante