polipo: denial of service
| Package(s): | polipo | CVE #(s): | CVE-2011-3596 | ||||||||
| Created: | February 2, 2012 | Updated: | February 8, 2012 | ||||||||
| Description: | From the Red Hat bugzilla entry: A denial of service flaw was found in the way Polipo, a lightweight caching web proxy, processed certain HTTP POST / PUT requests. If polipo was configured to allow remote client connections and particular host was allowed to connect to polipo server instance, a remote attacker could use this flaw to cause denial of service (polipo daemon abort due to assertion failure) via specially-crafted HTTP POST / PUT request. | ||||||||||
| Alerts: |
| ||||||||||