CVE-2007-0248 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2007-0248
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-0248

Description: The aclMatchExternal function in Squid before 2.6.STABLE7 allows remote attackers to cause a denial of service (crash) by causing an external_acl queue overload, which triggers an infinite loop.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/31525 UBUNTU http://www.ubuntu.com/usn/usn-414-1 SUSE http://www.novell.com/linux/security/advisories/2007_12_squid.html SAID Secunia Advisory: SA23767 Secunia Advisory: SA23805 Secunia Advisory: SA23889 Secunia Advisory: SA23921 Secunia Advisory: SA23946 MANDRIVA http://frontal2.mandriva.com/security/advisories?name=MDKSA-2007:026 GENTOO http://www.gentoo.org/security/en/glsa/glsa-200701-22.xml CONFIRM http://www.squid-cache.org/bugs/show_bug.cgi?id=1848 http://www.squid-cache.org/Versions/v2/2.6/squid-2.6.STABLE7-RELEASENOTES.html#s12 BID 22203

Return to the previous page.