CVE-2005-3258 The rfc1738_do_escape function in ftp.c for Squid 2.5 STABLE11 and earlier allows remote FTP servers to cause a denial of service (segmentation fault) via certain "odd" responses.
MediumCVSS 5.0
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The rfc1738_do_escape function in ftp.c for Squid 2.5 STABLE11 and earlier allows remote FTP servers to cause a denial of service (segmentation fault) via certain "odd" responses.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| squid | = 2.0.patch1 | No fix listed |
| squid | = 2.0.patch2 | No fix listed |
| squid | = 2.0.pre1 | No fix listed |
| squid | = 2.0.release | No fix listed |
| squid | = 2.1.patch1 | No fix listed |
| squid | = 2.1.patch2 | No fix listed |
| squid | = 2.1.pre1 | No fix listed |
| squid | = 2.1.pre3 | No fix listed |
| squid | = 2.1.pre4 | No fix listed |
| squid | = 2.1.release | No fix listed |
| squid | = 2.2.devel3 | No fix listed |
| squid | = 2.2.devel4 | No fix listed |
| squid | = 2.2.pre1 | No fix listed |
| squid | = 2.2.pre2 | No fix listed |
| squid | = 2.2.stable1 | No fix listed |
| squid | = 2.2.stable2 | No fix listed |
| squid | = 2.2.stable3 | No fix listed |
| squid | = 2.2.stable4 | No fix listed |
| squid | = 2.2.stable5 | No fix listed |
| squid | = 2.3.devel2 | No fix listed |
| squid | = 2.3.devel3 | No fix listed |
| squid | = 2.3.stable1 | No fix listed |
| squid | = 2.3.stable2 | No fix listed |
| squid | = 2.3.stable3 | No fix listed |
| squid | = 2.3.stable4 | No fix listed |
Show 20 more
| Product | Affected versions | Fixed in |
|---|---|---|
| squid | = 2.3.stable5 | No fix listed |
| squid | = 2.4 | No fix listed |
| squid | = 2.4.stable1 | No fix listed |
| squid | = 2.4.stable2 | No fix listed |
| squid | = 2.4.stable3 | No fix listed |
| squid | = 2.4.stable4 | No fix listed |
| squid | = 2.4.stable6 | No fix listed |
| squid | = 2.4.stable7 | No fix listed |
| squid | = 2.5.6 | No fix listed |
| squid | = 2.5.stable1 | No fix listed |
| squid | = 2.5.stable2 | No fix listed |
| squid | = 2.5.stable3 | No fix listed |
| squid | = 2.5.stable4 | No fix listed |
| squid | = 2.5.stable5 | No fix listed |
| squid | = 2.5.stable6 | No fix listed |
| squid | = 2.5.stable7 | No fix listed |
| squid | = 2.5.stable8 | No fix listed |
| squid | = 2.5.stable9 | No fix listed |
| squid | = 2.5.stable10 | No fix listed |
| squid | = 2.5.stable11 | No fix listed |
References
- 17271 third-party-advisory
- 17287 third-party-advisory
- 17338 third-party-advisory
- 17407 third-party-advisory
- 17513 third-party-advisory
- 17626 third-party-advisory
- 17645 third-party-advisory
- 1015085 vdb-entry
- SUSE-SR:2005:027 vendor-advisory
- www.squid-cache.org patch
- ADV-2005-2151 vdb-entry
- Debian Security Tracker CVE-2005-3258 vendor-advisory