Release DateSep 15, 2009 |
Severitymedium |
ImpactDenial of service |
DescriptionThis indicates an attack attempt against a denial-of-service vulnerability in Squid.The vulnerability is caused by an error when the vulnerable software handles a specially crafted HTTP response. It allows a remote attacker to create a denial-of-service condition on the target server. |
Affected ProductsSquid versions 3.0 through 3.0.STABLE16Squid versions 3.1 through 3.1.0.11 |
Recommended ActionsUpgrade to the latest versions:http://www.squid-cache.org/Download/ |
Coverage IPS
VCM |
Common Vulnerabilities and Exposures (CVE)CVE-2009-2622 |
Reference/shttp://www.securityfocus.com/bid/35812 (BugTraq)http://www.frsirt.com/english/advisories/2009/2013 (FrSIRT) |