CVE-2007-1560 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2007-1560
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-1560

Description: The clientProcessRequest() function in src/client_side.c in Squid 2.6 before 2.6.STABLE12 allows remote attackers to cause a denial of service (daemon crash) via crafted TRACE requests that trigger an assertion error.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/33124 UBUNTU http://www.ubuntu.com/usn/usn-441-1 SUSE http://www.novell.com/linux/security/advisories/2007_5_sr.html ST 1017805 SAID Secunia Advisory: SA24625 Secunia Advisory: SA24662 Secunia Advisory: SA24614 Secunia Advisory: SA24611 Secunia Advisory: SA24911 REDHAT http://www.redhat.com/support/errata/RHSA-2007-0131.html MANDRIVA http://frontal2.mandriva.com/security/advisories?name=MDKSA-2007:068 GENTOO http://security.gentoo.org/glsa/glsa-200703-27.xml CONFIRM http://www.squid-cache.org/Versions/v2/2.6/changesets/11349.patch http://www.squid-cache.org/Advisories/SQUID-2007_1.txt BID 23085

Return to the previous page.