CVE

Id
11080  
CVE No.
CVE-2004-2654  
Status
Candidate  
Description
The clientAbortBody function in client_side.c in Squid Web Proxy Cache before 2.6 STABLE6 allows remote attackers to cause a denial of service (segmentation fault) via unspecified vectors that trigger a null dereference. NOTE: in a followup advisory, a researcher claimed that the issue was a buffer overflow that was not fixed in STABLE6. However, the vendor"s bug report clearly shows that the researcher later retracted this claim, because the tested product was actually STABLE5.  
Phase
Assigned (20060224)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
78008 11080 CVE-2004-2654 MISC:http://www.squid-cache.org/bugs/show_bug.cgi?id=972  View
78009 11080 CVE-2004-2654 MISC:http://www.securitylab.ru/47881.html  View
78010 11080 CVE-2004-2654 VIM:20060223 old Squid clientAbortBody issue - NOT an overflow?  View
78011 11080 CVE-2004-2654 URL:http://www.attrition.org/pipermail/vim/2006-February/000570.html  View
78012 11080 CVE-2004-2654 OSVDB:9801  View
78013 11080 CVE-2004-2654 URL:http://www.osvdb.org/9801  View
78014 11080 CVE-2004-2654 SECTRACK:1011214  View
78015 11080 CVE-2004-2654 URL:http://securitytracker.com/id?1011214  View
78016 11080 CVE-2004-2654 SECUNIA:12508  View
78017 11080 CVE-2004-2654 URL:http://secunia.com/advisories/12508  View
78018 11080 CVE-2004-2654 SECUNIA:12754  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63624 JVNDB-2003-000350 XScreenSaver の rdesktop におけるパスワード情報が漏えいする脆弱性 XScreenSaver の rdesktop には、特定のアプリケーションが稼動している場合にスクリーンセーバのロックを解除するためのパスワードを表示してしまう問題があります。 CVE-2004-2655 11080 5.4 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000350.html  View