Login Request a demo
Unscored severity · published Dec 31, 2004
CVE-2004-2654
The clientAbortBody function in client_side.c in Squid Web Proxy Cache before 2.6 STABLE6 allows remote attackers to cause a denial of service (segmentation fault) via unspecified…
–
CVSS
2%
EPSS
No
On KEV
Description
The clientAbortBody function in client_side.c in Squid Web Proxy Cache before 2.6 STABLE6 allows remote attackers to cause a denial of service (segmentation fault) via unspecified vectors that trigger a null dereference. NOTE: in a followup advisory, a researcher claimed that the issue was a buffer overflow that was not fixed in STABLE6. However, the vendor's bug report clearly shows that the researcher later retracted this claim, because the tested product was actually STABLE5.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.0% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SQ
Squid · Squid
2.5_stable5 · source: NVD
Affected product
SQ
Squid
Squid
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-2654
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-2654
Vendor Advisory
http://secunia.com/advisories/12508
Patch
http://secunia.com/advisories/12754
securitytracker.com
http://securitytracker.com/id?1011214
www.attrition.org
http://www.attrition.org/pipermail/vim/2006-February/000570.html
www.osvdb.org
http://www.osvdb.org/9801
www.securitylab.ru
http://www.securitylab.ru/47881.html
More from Squid
–
CVE-2009-0478
Squid 2.7 to 2.7.STABLE5, 3.0 to 3.0.STABLE12, and 3.1 to 3.1.0.4 allows remote attackers to cause a denial of service via an HTTP request with an invalid version number, which…
–
CVE-2008-1612
The arrayShrink function (lib/Array.c) in Squid 2.6.STABLE17 allows attackers to cause a denial of service (process exit) via unknown vectors that cause an array to shrink to 0…
–
CVE-2007-1560
The clientProcessRequest() function in src/client_side.c in Squid 2.6 before 2.6.STABLE12 allows remote attackers to cause a denial of service (daemon crash) via crafted TRACE…
–
CVE-2007-0248
The aclMatchExternal function in Squid before 2.6.STABLE7 allows remote attackers to cause a denial of service (crash) by causing an external_acl queue overload, which triggers an…
–
CVE-2007-0247
squid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of service (core dump) via crafted FTP directory listing responses, possibly related to the…