Update squid SNMP DoS vulnerability to cover squid 3.0STABLE6 as well.

Submitted by:	Thomas-Martin Seck <tmseck web de>
This commit is contained in:
Xin LI 2008-06-28 22:35:10 +00:00
parent 36480fec29
commit 361a9e0ff2
Notes: svn2git 2021-03-31 03:12:20 +00:00
svn path=/head/; revision=215911

View file

@ -33860,6 +33860,7 @@ http_access deny Gopher</pre>
<package> <package>
<name>squid</name> <name>squid</name>
<range><lt>2.5.7</lt></range> <range><lt>2.5.7</lt></range>
<range><ge>3.0.0</ge><lt>3.0.7</lt></range>
</package> </package>
</affects> </affects>
<description> <description>
@ -33873,16 +33874,22 @@ http_access deny Gopher</pre>
explicitly enabled via "make config". As a workaround, explicitly enabled via "make config". As a workaround,
SNMP can be disabled by defining "snmp_port 0" in SNMP can be disabled by defining "snmp_port 0" in
squid.conf.</p> squid.conf.</p>
<p>Squid security advisory SQUID-2008:1 explains that Squid-3 versions
up to and including Squid-3.0.STABLE6 are affected by this error,
too.</p>
</body> </body>
</description> </description>
<references> <references>
<cvename>CVE-2004-0918</cvename> <cvename>CVE-2004-0918</cvename>
<url>http://www.idefense.com/application/poi/display?id=152&amp;type=vulnerabilities</url> <url>http://www.idefense.com/application/poi/display?id=152&amp;type=vulnerabilities</url>
<url>http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE6-SNMP_core_dump</url> <url>http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE6-SNMP_core_dump</url>
<url>http://www.squid-cache.org/Advisories/SQUID-2004_3.txt</url>
<url>http://www.squid-cache.org/Advisories/SQUID-2008_1.txt</url>
</references> </references>
<dates> <dates>
<discovery>2004-09-29</discovery> <discovery>2004-09-29</discovery>
<entry>2004-10-12</entry> <entry>2004-10-12</entry>
<modified>2008-06-28</modified>
</dates> </dates>
</vuln> </vuln>