NetSight
IP …
medium5.0Public exploit code

CVE-2009-0478

Squid 2.7 to 2.7.STABLE5, 3.0 to 3.0.STABLE12, and 3.1 to 3.1.0.4 allows remote attackers to cause a denial of service via an HTTP request with an invalid vers…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Squid 2.7 to 2.7.STABLE5, 3.0 to 3.0.STABLE12, and 3.1 to 3.1.0.4 allows remote attackers to cause a denial of service via an HTTP request with an invalid version number, which triggers a reachable assertion in (1) HttpMsg.c and (2) HttpStatusLine.c.

Affected products

VendorProductAffected versions
SquidSquid
Versions 2.7.stable1, 2.7.stable2, 2.7.stable3, 2.7.stable4, 2.7.stable5, 3.0.stable1

Weakness classification

CWE-20

References