Buffer overflows in Squid prior to 2.4.STABLE6 allow remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code (1) via the MSNT auth helper (msnt_auth) when using denyusers or allowusers files, (2) via the gopher client, or (3) via the FTP server directory listing parser when HTML output is generated.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
squid squid |