Update squid SNMP DoS vulnerability to cover squid 3.0STABLE6 as well.
Submitted by: Thomas-Martin Seck <tmseck web de>
This commit is contained in:
parent
36480fec29
commit
361a9e0ff2
Notes:
svn2git
2021-03-31 03:12:20 +00:00
svn path=/head/; revision=215911
1 changed files with 7 additions and 0 deletions
|
@ -33860,6 +33860,7 @@ http_access deny Gopher</pre>
|
||||||
<package>
|
<package>
|
||||||
<name>squid</name>
|
<name>squid</name>
|
||||||
<range><lt>2.5.7</lt></range>
|
<range><lt>2.5.7</lt></range>
|
||||||
|
<range><ge>3.0.0</ge><lt>3.0.7</lt></range>
|
||||||
</package>
|
</package>
|
||||||
</affects>
|
</affects>
|
||||||
<description>
|
<description>
|
||||||
|
@ -33873,16 +33874,22 @@ http_access deny Gopher</pre>
|
||||||
explicitly enabled via "make config". As a workaround,
|
explicitly enabled via "make config". As a workaround,
|
||||||
SNMP can be disabled by defining "snmp_port 0" in
|
SNMP can be disabled by defining "snmp_port 0" in
|
||||||
squid.conf.</p>
|
squid.conf.</p>
|
||||||
|
<p>Squid security advisory SQUID-2008:1 explains that Squid-3 versions
|
||||||
|
up to and including Squid-3.0.STABLE6 are affected by this error,
|
||||||
|
too.</p>
|
||||||
</body>
|
</body>
|
||||||
</description>
|
</description>
|
||||||
<references>
|
<references>
|
||||||
<cvename>CVE-2004-0918</cvename>
|
<cvename>CVE-2004-0918</cvename>
|
||||||
<url>http://www.idefense.com/application/poi/display?id=152&type=vulnerabilities</url>
|
<url>http://www.idefense.com/application/poi/display?id=152&type=vulnerabilities</url>
|
||||||
<url>http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE6-SNMP_core_dump</url>
|
<url>http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE6-SNMP_core_dump</url>
|
||||||
|
<url>http://www.squid-cache.org/Advisories/SQUID-2004_3.txt</url>
|
||||||
|
<url>http://www.squid-cache.org/Advisories/SQUID-2008_1.txt</url>
|
||||||
</references>
|
</references>
|
||||||
<dates>
|
<dates>
|
||||||
<discovery>2004-09-29</discovery>
|
<discovery>2004-09-29</discovery>
|
||||||
<entry>2004-10-12</entry>
|
<entry>2004-10-12</entry>
|
||||||
|
<modified>2008-06-28</modified>
|
||||||
</dates>
|
</dates>
|
||||||
</vuln>
|
</vuln>
|
||||||
|
|
||||||
|
|
Loading…
Reference in a new issue