[Forgot Password]
Login  Register Subscribe

30430

 
 

423868

 
 

247768

 
 

909

 
 

194555

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2004-0918Date: (C)2005-01-27   (M)2023-12-22


The asn_parse_header function (asn1.c) in the SNMP module for Squid Web Proxy Cache before 2.4.STABLE7 allows remote attackers to cause a denial of service (server restart) via certain SNMP packets with negative length fields that trigger a memory allocation error.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 5.0
Exploit Score: 10.0
Impact Score: 2.9
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: NONE
Integrity: NONE
Availability: PARTIAL
  
Reference:
BID-11385
http://www.idefense.com/application/poi/display?id=152&type=vulnerabilities&flashstatus=false
SECUNIA-30914
SECUNIA-30967
ADV-2008-1969
CLA-2005:923
FEDORA-2008-6045
FLSA-2006:152809
GLSA-200410-15
OpenPKG-SA-2004.048
RHSA-2004:591
SCOSA-2005.16
SUSE-SR:2008:014
http://www.squid-cache.org/Advisories/SQUID-2004_3.txt
http://www.squid-cache.org/Advisories/SQUID-2008_1.txt
oval:org.mitre.oval:def:10931
squid-snmp-asnparseheader-dos(17688)

CPE    6
cpe:/a:openpkg:openpkg:2.1
cpe:/a:openpkg:openpkg:2.2
cpe:/o:gentoo:linux
cpe:/o:trustix:secure_linux:1.5
...
CWE    1
CWE-399
OVAL    1
oval:org.secpod.oval:def:101433

© SecPod Technologies