NVD

Id
50077  
Name
CVE-2009-2855  
Description
The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers to cause a denial of service via a crafted auth header with certain comma delimiters that trigger an infinite loop of calls to the strcspn function.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2009-08-18  
Modified Date
2010-08-21  
Seq
2009-2855  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
253404 50077 CVE-2009-2855 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=534982  View
253405 50077 CVE-2009-2855 http://bugs.debian.org/cgi-bin/bugreport.cgi?msg=31;filename=diff;att=1;bug=534982  View
253406 50077 CVE-2009-2855 oval:org.mitre.oval:def:10592  View
253407 50077 CVE-2009-2855 [oss-security] 20090720 squid DoS in external auth header parser  View
253408 50077 CVE-2009-2855 [oss-security] 20090803 Re: squid DoS in external auth header parser  View
253409 50077 CVE-2009-2855 [oss-security] 20090804 Re: squid DoS in external auth header parser  View
253410 50077 CVE-2009-2855 36091  View
253411 50077 CVE-2009-2855 1022757  View
253412 50077 CVE-2009-2855 http://www.squid-cache.org/bugs/show_bug.cgi?id=2541  View
253413 50077 CVE-2009-2855 http://www.squid-cache.org/bugs/show_bug.cgi?id=2704  View
253414 50077 CVE-2009-2855 squid-strlistgetitem-dos(52610)  View
253415 50077 CVE-2009-2855 https://bugzilla.redhat.com/show_bug.cgi?id=518182  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41191 JVNDB-2009-002198 Squid の strListGetItem 関数におけるサービス運用妨害 (DoS) の脆弱性 Squid の strListGetItem 関数には、認証ヘッダの処理に不備があるため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2009-2855 40286 CVE-2009-2855 50077 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002198.html 2009-08-18 2010-04-27 View