NVD

Id
73031  
Name
CVE-2004-2654  
Description
The clientAbortBody function in client_side.c in Squid Web Proxy Cache before 2.6 STABLE6 allows remote attackers to cause a denial of service (segmentation fault) via unspecified vectors that trigger a null dereference. NOTE: in a followup advisory, a researcher claimed that the issue was a buffer overflow that was not fixed in STABLE6. However, the vendor"s bug report clearly shows that the researcher later retracted this claim, because the tested product was actually STABLE5.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2016-12-20  
Published
2004-12-31  
Modified Date
2008-09-05  
Seq
2004-2654  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
376051 73031 CVE-2004-2654 1011214  View
376052 73031 CVE-2004-2654 20060223 old Squid clientAbortBody issue - NOT an overflow?  View
376053 73031 CVE-2004-2654 http://www.securitylab.ru/47881.html  View
376054 73031 CVE-2004-2654 http://www.squid-cache.org/bugs/show_bug.cgi?id=972  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63034 JVNDB-2004-000376 Squid の clientAbortBody() 関数におけるバッファオーバーフローの脆弱性 Squid に実装される clientAbortBody() 関数には、境界チェックが適切に行われない不備のため、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2004-2654 11079 CVE-2004-2654 73031 5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000376.html 2004-09-10 2007-04-01 View