Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
5
CVSSv2

CVE-2010-0639

Published: 15/02/2010 Updated: 02/08/2010
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Subscribe to Squid-cache

Vulnerability Summary

The htcpHandleTstRequest function in htcp.c in Squid 2.x prior to 2.6.STABLE24 and 2.7 prior to 2.7.STABLE8, and htcp.cc in 3.0 prior to 3.0.STABLE24, allows remote malicious users to cause a denial of service (NULL pointer dereference and daemon crash) via crafted packets to the HTCP port.

Vulnerable Product Search on Vulmon Subscribe to Product

squid-cache squid 2.6

squid-cache squid 2.7

squid-cache squid 2.1

squid-cache squid 3.0.stable2

squid-cache squid 3.0.stable20

squid-cache squid 3.0.stable21

squid-cache squid 3.0.stable22

squid-cache squid 3.0.stable11

squid-cache squid 3.0.stable12

squid-cache squid 3.0.stable13

squid-cache squid 3.0.stable14

squid-cache squid 3.0.stable15

squid-cache squid 3.0.stable7

squid-cache squid 3.0.stable8

squid-cache squid 3.0.stable9

squid-cache squid 3.0.stable23

squid-cache squid 2.0

squid-cache squid 2.5

squid-cache squid 2.2

squid-cache squid 3.0

squid-cache squid 3.0.stable16

squid-cache squid 3.0.stable18

squid-cache squid 3.0.stable4

squid-cache squid 3.0.stable6

squid-cache squid 2.4

squid-cache squid 2.3

squid-cache squid 3.0.stable1

squid-cache squid 3.0.stable17

squid-cache squid 3.0.stable19

squid-cache squid 3.0.stable3

squid-cache squid 3.0.stable5

Vendor Advisories

Debian CVElist Bug Report Logs: CVE-2010-0639: HTCP DoS
Debian Bug report logs - #572553 CVE-2010-0639: HTCP DoS Package: squid; Maintainer for squid is Luigi Gangitano <luigi@debianorg>; Source for squid is src:squid (PTS, buildd, popcon) Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Thu, 4 Mar 2010 20:51:09 UTC Severity: important Tags: security Found in ve ...
Ubuntu Security Notice: squid vulnerability
It was discovered that Squid incorrectly handled certain malformed packets received on the HTCP port A remote attacker could exploit this with a specially-crafted packet and cause Squid to crash, resulting in a denial of service ...

References

NVD-CWE-Otherhttp://osvdb.org/62297http://www.squid-cache.org/Versions/v2/2.7/changesets/12600.patchhttp://www.vupen.com/english/advisories/2010/0371http://www.squid-cache.org/Advisories/SQUID-2010_2.txthttp://bugs.squid-cache.org/show_bug.cgi?id=2858http://www.securitytracker.com/id?1023587http://www.squid-cache.org/Versions/v3/3.0/changesets/3.0-ADV-2010_2.patchhttp://www.securityfocus.com/bid/38212http://www.vupen.com/english/advisories/2010/0603http://lists.fedoraproject.org/pipermail/package-announce/2010-March/037159.htmlhttp://secunia.com/advisories/38812http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035961.htmlhttps://bugs.debian.org/cgi-bin/bugreport.cgi?bug=572553https://usn.ubuntu.com/904-1/https://nvd.nist.gov
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-21111CVE-2024-32884IDORCVE-2023-1000CVE-2024-33260CVE-2024-3682reflected XSSrace conditionCVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook