SUSE Linux Squid Proxy SSL Handling Denial of Service Vulnerability
BID:15165
Info
SUSE Linux Squid Proxy SSL Handling Denial of Service Vulnerability
| Bugtraq ID: | 15165 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 21 2005 12:00AM |
| Updated: | Oct 21 2005 12:00AM |
| Credit: | This issue was reported by the vendor. |
| Vulnerable: |
S.u.S.E. Linux Professional 9.0 x86_64 S.u.S.E. Linux Professional 9.0 S.u.S.E. Linux Personal 9.0 x86_64 S.u.S.E. Linux Personal 9.0 |
| Not Vulnerable: | |
Discussion
SUSE Linux Squid Proxy SSL Handling Denial of Service Vulnerability
Squid Proxy running on SUSE Linux is affected by a denial of service vulnerability.
Reports indicate that this issue arises when the application handles specially crafted HTTPS data. Due to the nature of the application, it is conjectured that this vulnerability poses a remote threat.
Successful exploitation may cause the service to crash.
SUSE Linux 9.0 is reported to be vulnerable to this issue.
This BID will be updated when more information is available.
Squid Proxy running on SUSE Linux is affected by a denial of service vulnerability.
Reports indicate that this issue arises when the application handles specially crafted HTTPS data. Due to the nature of the application, it is conjectured that this vulnerability poses a remote threat.
Successful exploitation may cause the service to crash.
SUSE Linux 9.0 is reported to be vulnerable to this issue.
This BID will be updated when more information is available.
Exploit / POC
SUSE Linux Squid Proxy SSL Handling Denial of Service Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
SUSE Linux Squid Proxy SSL Handling Denial of Service Vulnerability
Solution:
SUSE has acknowledged this issue in an advisory (SUSE-SR:2005:024). The vendor plans to release fixes in the near future.
SUSE advisory SUSE-SR:2005:028 is available to address various issues. Please see the referenced advisory for more information.
Solution:
SUSE has acknowledged this issue in an advisory (SUSE-SR:2005:024). The vendor plans to release fixes in the near future.
SUSE advisory SUSE-SR:2005:028 is available to address various issues. Please see the referenced advisory for more information.
References
SUSE Linux Squid Proxy SSL Handling Denial of Service Vulnerability
References:
References: