Vulnerability   
Search   
    Search 324607 CVE descriptions
and 146377 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.55494
Category:Debian Local Security Checks
Title:Debian Security Advisory DSA 809-2 (squid)
Summary:The remote host is missing an update to squid announced via advisory DSA 809-2. Certain aborted requests that trigger an assertion in squid, the popular WWW proxy cache, may allow remote attackers to cause a denial of service. This update also fixes a regression caused by DSA 751. For the oldstable distribution (woody) this problem has been fixed in version 2.4.6-2woody10.;; This VT has been deprecated and merged into the VT 'Debian: Security Advisory (DSA-809)' (OID: 1.3.6.1.4.1.25623.1.0.55816).
Description:Summary:
The remote host is missing an update to squid announced via advisory DSA 809-2. Certain aborted requests that trigger an assertion in squid, the popular WWW proxy cache, may allow remote attackers to cause a denial of service. This update also fixes a regression caused by DSA 751. For the oldstable distribution (woody) this problem has been fixed in version 2.4.6-2woody10.

This VT has been deprecated and merged into the VT 'Debian: Security Advisory (DSA-809)' (OID: 1.3.6.1.4.1.25623.1.0.55816).

Solution:
For the stable distribution (sarge) this problem has been fixed in
version 2.5.9-10sarge1.

For the unstable distribution (sid) this problem has been fixed in
version 2.5.10-5.

We recommend that you upgrade your squid package.

CVSS Score:
5.0

CVSS Vector:
AV:N/AC:L/Au:N/C:N/I:N/A:P

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2005-2794
14761
http://www.securityfocus.com/bid/14761
16977
http://secunia.com/advisories/16977
17027
http://secunia.com/advisories/17027
DSA-809
http://www.debian.org/security/2005/dsa-809
FLSA-2006:152809
http://fedoranews.org/updates/FEDORA--.shtml
GLSA-200509-06
http://www.gentoo.org/security/en/glsa/glsa-200509-06.xml
MDKSA-2005:162
http://www.mandriva.com/security/advisories?name=MDKSA-2005:162
RHSA-2005:766
http://www.redhat.com/support/errata/RHSA-2005-766.html
SUSE-SA:2005:053
http://www.novell.com/linux/security/advisories/2005_53_squid.html
SUSE-SR:2005:021
http://www.novell.com/linux/security/advisories/2005_21_sr.html
http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE10-STORE_PENDING
oval:org.mitre.oval:def:10276
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10276
CopyrightCopyright (C) 2008 E-Soft Inc.

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.