squid: denial of service [LWN.net]

Package(s):

squid

CVE #(s):

CVE-2007-1560

Created:

March 23, 2007

Updated:

April 3, 2007

Description:

Due to an internal error Squid-2.6 is vulnerable to a denial of service attack when processing the TRACE request method. This problem allows any client trusted to use the service to perform a denial of service attack on the Squid service.

Alerts:

Red Hat	RHSA-2007:0131-01	2007-04-03
Gentoo	200703-27	2007-03-31
SuSE	SUSE-SR:2007:005	2007-03-30
Mandriva	MDKSA-2007:068	2006-03-22

(Log in to post comments)

squid: denial of service

Posted Sep 27, 2007 18:29 UTC (Thu) by kreutzm (guest, #4700) [Link]

Debian Sarge and Etch are not vulnerable.