FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2010-0639

This CVE name corresponds to:

Entered	Topic
2010-02-14	squid -- Denial of Service vulnerability in HTCP

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2010-0639 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2010-0639
Phase	Assigned(20100215)

Description

The htcpHandleTstRequest function in htcp.c in Squid 2.x before 2.6.STABLE24 and 2.7 before 2.7.STABLE8, and htcp.cc in 3.0 before 3.0.STABLE24, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via crafted packets to the HTCP port.

References

Source	Reference
MISC	http://bugs.squid-cache.org/show_bug.cgi?id=2858
MISC	http://www.squid-cache.org/Versions/v2/2.7/changesets/12600.patch
MISC	http://www.squid-cache.org/Versions/v3/3.0/changesets/3.0-ADV-2010_2.patch
CONFIRM	http://www.squid-cache.org/Advisories/SQUID-2010_2.txt
FEDORA	FEDORA-2010-2434
FEDORA	FEDORA-2010-3064
BID	38212
OSVDB	62297
SECTRACK	1023587
SECUNIA	38812
VUPEN	ADV-2010-0371
VUPEN	ADV-2010-0603