CVE-2009-2622: Input Validation
First published: Tue Jul 28 2009(Updated: )
Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 allows remote attackers to cause a denial of service via malformed requests including (1) "missing or mismatched protocol identifier," (2) missing or negative status value," (3) "missing version," or (4) "missing or invalid status number," related to (a) HttpMsg.cc and (b) HttpReply.cc.
Credit: cret@cert.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Squid-Cache Squid | =3.0-rc4 | |
| Squid-Cache Squid | =3.0 | |
| Squid-Cache Squid | =3.0 | |
| Squid-Cache Squid | =3.0 | |
| Squid-Cache Squid | =3.0 | |
| Squid-Cache Squid | =3.0 | |
| Squid-Cache Squid | =3.0 | |
| Squid-Cache Squid | =3.1.0.3 | |
| Squid-Cache Squid | =3.1.0.1 | |
| Squid-Cache Squid | =3.0 | |
| Squid-Cache Squid | =3.0 | |
| Squid-Cache Squid | =3.0 | |
| Squid-Cache Squid | =3.0-rc1 | |
| Squid-Cache Squid | =3.0 | |
| Squid-Cache Squid | =3.0 | |
| Squid-Cache Squid | =3.1.0.2 | |
| Squid-Cache Squid | =3.0 | |
| Squid-Cache Squid | =3.0 | |
| Squid-Cache Squid | =3.1.0.4 | |
| Squid-Cache Squid | =3.0 | |
| Squid-Cache Squid | =3.0 | |
| Squid-Cache Squid | =3.1 | |
| Squid-Cache Squid | =3.0 | |
| Squid-Cache Squid | =3.0 | |
| Squid-Cache Squid | =3.0 | |
| Squid-Cache Squid | =3.0 | |
| Squid-Cache Squid | =3.0 | |
| Squid-Cache Squid | =3.0 | |
| Squid-Cache Squid | =3.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.squid-cache.org/Advisories/SQUID-2009_2.txt
- http://www.squid-cache.org/Versions/v3/3.1/changesets/b9661.patch
- http://www.vupen.com/english/advisories/2009/2013
- http://secunia.com/advisories/36007
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:178
- http://www.securitytracker.com/id?1022607
- http://www.securityfocus.com/bid/35812
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:161
- collector/nvd-historical
- collector/nvd-index
- agent/weakness
- agent/author
- agent/severity
- agent/references
- agent/event
- agent/type
- agent/description
- agent/last-modified-date
- agent/remedy
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/squid-cache
- canonical/squid-cache squid
- version/squid-cache squid/3.0-rc4
- version/squid-cache squid/3.0
- version/squid-cache squid/3.1.0.3
- version/squid-cache squid/3.1.0.1
- version/squid-cache squid/3.0-rc1
- version/squid-cache squid/3.1.0.2
- version/squid-cache squid/3.1.0.4
- version/squid-cache squid/3.1