PT-2005-3770 · Squid+1 · Squid+2

Published 2005-09-30 · Updated 2017-10-11 · CVE-2005-2917

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Squid versions 2.5.STABLE10 and earlier

Description The issue occurs during NTLM authentication, where certain request sequences are not properly handled, allowing attackers to cause a denial of service, which results in the daemon restarting.

Recommendations For Squid versions 2.5.STABLE10 and earlier, consider updating to a newer version to resolve the issue.

Fix

Related Identifiers

CVE-2005-2917

DSA-828-1

RHSA-2006:0045

RHSA-2006:0052

RHSA-2006_0052

Affected Products

Red Hat

Squid

Squid Cache

References · 27

• ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2006-0045.html · Vendor Advisory
• http://debian.org/security/2005/dsa-828 · Vendor Advisory
• http://novell.com/linux/security/advisories/2005_27_sr.html · Vendor Advisory
• http://ubuntu.com/usn/usn-192-1 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2005:181 · Vendor Advisory
• http://fedoranews.org/updates/FEDORA--.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-2917 · Security Note
• ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-2917 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2006-0052.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2005-2917 · Vendor Advisory
• http://secunia.com/advisories/16992 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2005-2917 · Vendor Advisory
• http://secunia.com/advisories/19532 · Note