CVE-2005-2917 Squid 2.5.STABLE10 and earlier, while performing NTLM authentication, does not properly handle certain request sequences, which allows attackers to cause a denial of service (daemon restart).
MediumCVSS 5.0
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Squid 2.5.STABLE10 and earlier, while performing NTLM authentication, does not properly handle certain request sequences, which allows attackers to cause a denial of service (daemon restart).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| squid | <= 2.5.stable10 | No fix listed |
| squid | = 2.5.9 | No fix listed |
| debian/squid(Debian:12) | < 2.5.10-7 | 2.5.10-7 |
| debian/squid(Debian:13) | < 2.5.10-7 | 2.5.10-7 |
| debian/squid(Debian:14) | < 2.5.10-7 | 2.5.10-7 |
References
- FLSA-2006:152809 vendor-advisory
- 16992 patch third-party-advisory vendor-advisory
- 17015 third-party-advisory
- 17050 third-party-advisory
- 17177 third-party-advisory
- 19161 third-party-advisory
- 19532 third-party-advisory
- 1014920 vdb-entry
- DSA-828 patch vendor-advisory
- MDKSA-2005:181 vendor-advisory
- SUSE-SR:2005:027 vendor-advisory
- 19607 vdb-entry
- RHSA-2006:0045 vendor-advisory
- RHSA-2006:0052 vendor-advisory
- 14977 vdb-entry
- USN-192-1 vendor-advisory
- squid-ntlm-authentication-dos(24282) vdb-entry
- oval:org.mitre.oval:def:11580 signature vdb-entry
- Debian Security Tracker CVE-2005-2917 vendor-advisory