CVE-2010-0639

 

Published at: - 15-02-2010 07:30

Last modified: - 04-10-2022 08:28

Total changes: - 2

Description

The htcpHandleTstRequest function in htcp.c in Squid 2.x before 2.6.STABLE24 and 2.7 before 2.7.STABLE8, and htcp.cc in 3.0 before 3.0.STABLE24, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via crafted packets to the HTCP port.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:L/Au:N/C:N/I:N/A:P

 

Verification logic

 

Reference

• 62297-
• http://www.squid-cache.org/Versions/v2/2.7/changesets/12600.patch
• ADV-2010-0371-Vendor Advisory
• http://www.squid-cache.org/Advisories/SQUID-2010_2.txt
• http://bugs.squid-cache.org/show_bug.cgi?id=2858
• 1023587-
• http://www.squid-cache.org/Versions/v3/3.0/changesets/3.0-ADV-2010_2.patch
• 38212-
• ADV-2010-0603-Vendor Advisory
• FEDORA-2010-2434-
• 38812-Vendor Advisory
• FEDORA-2010-3064-

 

Keywords

NVD

 

CVE-2010-0639

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures