CVE-2004-0918: Medium severity Squid Squid vulnerability
Published Oct 21, 2004
·Updated
The asnparseheader function (asn1.c) in the SNMP module for Squid Web Proxy Cache before 2.4.STABLE7 allows remote attackers to cause a denial of service (server restart) via certain SNMP packets with negative length fields that trigger a memory allocation error.
Affected Software
26 affected components
Squid Squid=2.5_.stable3
Squid Squid=2.1_patch2
Squid Squid=2.4_.stable7
Openpkg Openpkg=2.1
Squid Squid=2.0_patch2
Squid Squid=2.4_.stable2
Squid Squid=2.3_.stable4
Squid Squid=2.3_.stable5
Squid Squid=2.5_.stable5
Openpkg Openpkg=current
Squid Squid=3.0_pre1
Squid Squid=2.5_.stable6
Openpkg Openpkg=2.2
Squid Squid=2.4_.stable6
Squid Squid=2.5_.stable1
Squid Squid=2.4
Squid Squid=2.5_.stable4
Squid Squid=3.0_pre3
Squid Squid=3.0_pre2
redhat Fedora Core=core_2.0
Trustix Secure Linux=2.0
Ubuntu Ubuntu Linux=4.1
Trustix Secure Linux=1.5
Trustix Secure Linux=2.1
Ubuntu Ubuntu Linux=4.1
Gentoo Linux
Remediation
Patch Available
Patch Available
Event History
Oct 21, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0918?
CVE-2004-0918 is classified as a denial of service vulnerability that can lead to server restarts.
2
How do I fix CVE-2004-0918?
To fix CVE-2004-0918, upgrade to Squid Web Proxy Cache version 2.4.STABLE7 or later.
3
Who is affected by CVE-2004-0918?
CVE-2004-0918 affects various versions of Squid Web Proxy Cache and Openpkg software.
4
What causes CVE-2004-0918?
CVE-2004-0918 is caused by processing certain SNMP packets with negative length fields, resulting in a memory allocation error.
5
Is CVE-2004-0918 exploitable remotely?
Yes, CVE-2004-0918 can be exploited remotely by sending specially crafted SNMP packets.