PT-2004-3544 · Squid · Squid Web Proxy Cache+1

Published 2004-12-31 · Updated 2008-09-05 · CVE-2004-2654

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Squid Web Proxy Cache versions prior to 2.6 STABLE6

Description The issue allows remote attackers to cause a denial of service, resulting in a segmentation fault. This is achieved through unspecified vectors that trigger a null dereference. Initial claims suggested a buffer overflow, but this was later retracted by the researcher.

Recommendations For Squid Web Proxy Cache versions prior to 2.6 STABLE6, update to version 2.6 STABLE6 or later to resolve the issue.

Fix

Related Identifiers

CVE-2004-2654

Affected Products

Squid Cache

Squid Web Proxy Cache

References · 12

• http://secunia.com/advisories/12754 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2004-2654 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-2654 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-2654 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2004-2654 · Vendor Advisory
• http://secunia.com/advisories/12508 · Vendor Advisory
• http://squid-cache.org/bugs/show_bug.cgi?id=972 · Note
• http://securitylab.ru/47881.html · Note
• http://attrition.org/pipermail/vim/2006-February/000570.html · Note
• http://securitytracker.com/id?1011214 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-2654 · Note
• http://osvdb.org/9801 · Note