Squid Header-Only Packets Remote Denial of Service Vulnerability

Bugtraq ID:	37522
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2010-0308
Remote:	Yes
Local:	No
Published:	Dec 29 2009 12:00AM
Updated:	Apr 13 2015 09:56PM
Credit:	Fabian Yamaguchi
Vulnerable:	Ubuntu Ubuntu Linux 9.10 sparc Ubuntu Ubuntu Linux 9.10 powerpc Ubuntu Ubuntu Linux 9.10 lpia Ubuntu Ubuntu Linux 9.10 i386 Ubuntu Ubuntu Linux 9.10 amd64 Ubuntu Ubuntu Linux 9.04 sparc Ubuntu Ubuntu Linux 9.04 powerpc Ubuntu Ubuntu Linux 9.04 lpia Ubuntu Ubuntu Linux 9.04 i386 Ubuntu Ubuntu Linux 9.04 amd64 Ubuntu Ubuntu Linux 8.10 sparc Ubuntu Ubuntu Linux 8.10 powerpc Ubuntu Ubuntu Linux 8.10 lpia Ubuntu Ubuntu Linux 8.10 i386 Ubuntu Ubuntu Linux 8.10 amd64 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 SuSE SUSE Linux Enterprise Server 9 SuSE SUSE Linux Enterprise 11 SuSE SUSE Linux Enterprise 10 SP3 SuSE SUSE Linux Enterprise 10 SP2 Squid Web Proxy Cache 3.1 .5 Squid Web Proxy Cache 3.1 .4 Squid Web Proxy Cache 3.0 PRE3 Squid Web Proxy Cache 3.0 PRE2 Squid Web Proxy Cache 3.0 PRE1 Squid Web Proxy Cache 3.0 Squid Web Proxy Cache 2.5 .STABLE9 Squid Web Proxy Cache 2.5 .STABLE8 Squid Web Proxy Cache 2.5 .STABLE7 Squid Web Proxy Cache 2.5 .STABLE6 Squid Web Proxy Cache 2.5 .STABLE5 Squid Web Proxy Cache 2.5 .STABLE4 + MandrakeSoft Corporate Server 3.0 + Mandriva Linux Mandrake 10.0 AMD64 + Mandriva Linux Mandrake 10.0 + OpenPKG OpenPKG 2.0 + OpenPKG OpenPKG Current Squid Web Proxy Cache 2.5 .STABLE3 + Mandriva Linux Mandrake 9.2 amd64 + Mandriva Linux Mandrake 9.2 + OpenPKG OpenPKG 1.3 + Redhat Desktop 3.0 + Redhat Enterprise Linux AS 3 + Redhat Enterprise Linux ES 3 + Redhat Enterprise Linux WS 3 + Redhat Fedora Core1 + S.u.S.E. Linux Personal 9.0 x86_64 + S.u.S.E. Linux Personal 9.0 Squid Web Proxy Cache 2.5 .STABLE10 Squid Web Proxy Cache 2.5 .STABLE1 + Mandriva Linux Mandrake 9.1 ppc + Mandriva Linux Mandrake 9.1 + S.u.S.E. Linux Personal 8.2 Squid Web Proxy Cache 2.4 .STABLE7 Squid Web Proxy Cache 2.4 .STABLE6 Squid Web Proxy Cache 2.4 .STABLE4 Squid Web Proxy Cache 2.4 .STABLE2 Squid Web Proxy Cache 2.4 + Debian Linux 3.0 sparc + Debian Linux 3.0 s/390 + Debian Linux 3.0 ppc + Debian Linux 3.0 mipsel + Debian Linux 3.0 mips + Debian Linux 3.0 m68k + Debian Linux 3.0 ia-64 + Debian Linux 3.0 ia-32 + Debian Linux 3.0 hppa + Debian Linux 3.0 arm + Debian Linux 3.0 alpha + Debian Linux 3.0 Squid Web Proxy Cache 2.3 .STABLE5 Squid Web Proxy Cache 2.3 .STABLE4 Squid Web Proxy Cache 2.1 PATCH2 Squid Web Proxy Cache 2.0 PATCH2 Squid Web Proxy Cache 3.1.0.15 Squid Web Proxy Cache 3.1.0.12 Squid Web Proxy Cache 3.1.0.11 Squid Web Proxy Cache 3.1 Squid Web Proxy Cache 3.0.STABLE7 Squid Web Proxy Cache 3.0.STABLE6 Squid Web Proxy Cache 3.0.STABLE5 Squid Web Proxy Cache 3.0.STABLE4 Squid Web Proxy Cache 3.0.STABLE3 Squid Web Proxy Cache 3.0.STABLE21 Squid Web Proxy Cache 3.0.STABLE2 Squid Web Proxy Cache 3.0.STABLE17 Squid Web Proxy Cache 3.0.STABLE16 Squid Web Proxy Cache 3.0.STABLE13 Squid Web Proxy Cache 3.0.STABLE12 Squid Web Proxy Cache 3.0.STABLE1 Squid Web Proxy Cache 2.7.STABLE6 Squid Web Proxy Cache 2.7.STABLE5 Squid Web Proxy Cache 2.7 Squid Web Proxy Cache 2.6.STABLE7 Squid Web Proxy Cache 2.6.STABLE6 Squid Web Proxy Cache 2.6.STABLE5 Squid Web Proxy Cache 2.6.STABLE4 Squid Web Proxy Cache 2.6.STABLE3 Squid Web Proxy Cache 2.6.STABLE2 Squid Web Proxy Cache 2.6.STABLE18 Squid Web Proxy Cache 2.6.STABLE17 Squid Web Proxy Cache 2.6.STABLE16 Squid Web Proxy Cache 2.6.STABLE15 Squid Web Proxy Cache 2.6.STABLE14 Squid Web Proxy Cache 2.6.STABLE13 Squid Web Proxy Cache 2.6.STABLE12 Squid Web Proxy Cache 2.6.STABLE1 Squid Web Proxy Cache 2.6 Squid Web Proxy Cache 2.5.STABLE14 Squid Web Proxy Cache 2.5.STABLE13 Squid Web Proxy Cache 2.5.STABLE12 Squid Web Proxy Cache 2.5.STABLE11 S.u.S.E. openSUSE 11.2 S.u.S.E. openSUSE 11.1 S.u.S.E. openSUSE 11.0 Redhat Enterprise Linux Desktop Workstation 5 client Redhat Enterprise Linux 5 Server Mandriva Linux Mandrake 2010.0 x86_64 Mandriva Linux Mandrake 2010.0 Mandriva Linux Mandrake 2009.1 x86_64 Mandriva Linux Mandrake 2009.1 Mandriva Linux Mandrake 2009.0 x86_64 Mandriva Linux Mandrake 2009.0 Mandriva Linux Mandrake 2008.0 x86_64 Mandriva Linux Mandrake 2008.0 MandrakeSoft Multi Network Firewall 2.0 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 4.0 Gentoo Linux Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 armel Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0
Not Vulnerable:	Squid Web Proxy Cache 3.1.0.16 Squid Web Proxy Cache 3.0.STABLE22

Squid Header-Only Packets Remote Denial of Service Vulnerability

Squid is prone to a remote denial-of-service vulnerability.

An attacker can exploit this to issue to crash the affected application, denying service to legitimate users.

The following are vulnerable:

Squid 2.x
Squid 3.0.x (prior to 3.0.STABLE22)
Squid 3.1.x (prior to 3.1.0.16)

Squid Header-Only Packets Remote Denial of Service Vulnerability

An attacker may use readily available networking tools to exploit this issue.

Squid Header-Only Packets Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for more information.


Squid Web Proxy Cache 3.0.STABLE17

• Squid squid-3.0.STABLE22.tar.gz
  http://www.squid-cache.org/Versions/v3/3.0/squid-3.0.STABLE22.tar.gz

Squid Web Proxy Cache 3.0.STABLE5

• Squid squid-3.0.STABLE22.tar.gz
  http://www.squid-cache.org/Versions/v3/3.0/squid-3.0.STABLE22.tar.gz

Debian Linux 5.0 alpha

• Debian squid-cgi_2.7.STABLE3-4.1lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/s/squid/squid-cgi_2.7.STA BLE3-4.1lenny1_alpha.deb


• Debian squid-common_2.7.STABLE3-4.1lenny1_all.deb
  http://security.debian.org/pool/updates/main/s/squid/squid-common_2.7. STABLE3-4.1lenny1_all.deb


• Debian squid_2.7.STABLE3-4.1lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/s/squid/squid_2.7.STABLE3 -4.1lenny1_alpha.deb


• Debian squid3-cgi_3.0.STABLE8-3+lenny3_alpha.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-cgi_3.0.S TABLE8-3+lenny3_alpha.deb


• Debian squid3-common_3.0.STABLE8-3+lenny3_all.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-common_3. 0.STABLE8-3+lenny3_all.deb


• Debian squid3_3.0.STABLE8-3+lenny3_alpha.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3_3.0.STABL E8-3+lenny3_alpha.deb


• Debian squidclient_3.0.STABLE8-3+lenny3_alpha.deb
  http://security.debian.org/pool/updates/main/s/squid3/squidclient_3.0. STABLE8-3+lenny3_alpha.deb

Squid Web Proxy Cache 3.0.STABLE3

• Squid squid-3.0.STABLE22.tar.gz
  http://www.squid-cache.org/Versions/v3/3.0/squid-3.0.STABLE22.tar.gz

Mandriva Linux Mandrake 2008.0

• Mandriva squid-2.6.STABLE16-1.5mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva squid-cachemgr-2.6.STABLE16-1.5mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 4.0 amd64

• Debian squid-cgi_2.6.5-6etch5_amd64.deb
  http://security.debian.org/pool/updates/main/s/squid/squid-cgi_2.6.5-6 etch5_amd64.deb


• Debian squid-common_2.6.5-6etch5_all.deb
  http://security.debian.org/pool/updates/main/s/squid/squid-common_2.6. 5-6etch5_all.deb


• Debian squid_2.6.5-6etch5_amd64.deb
  http://security.debian.org/pool/updates/main/s/squid/squid_2.6.5-6etch 5_amd64.deb


• Debian squid3-common_3.0.PRE5-5+etch2_all.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-common_3. 0.PRE5-5+etch2_all.deb


• Debian squidclient_2.6.5-6etch5_amd64.deb
  http://security.debian.org/pool/updates/main/s/squid/squidclient_2.6.5 -6etch5_amd64.deb

Debian Linux 4.0 ia-32

• Debian squid-cgi_2.6.5-6etch5_i386.deb
  http://security.debian.org/pool/updates/main/s/squid/squid-cgi_2.6.5-6 etch5_i386.deb


• Debian squid-common_2.6.5-6etch5_all.deb
  http://security.debian.org/pool/updates/main/s/squid/squid-common_2.6. 5-6etch5_all.deb


• Debian squid_2.6.5-6etch5_i386.deb
  http://security.debian.org/pool/updates/main/s/squid/squid_2.6.5-6etch 5_i386.deb


• Debian squid3-cgi_3.0.PRE5-5+etch2_i386.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-cgi_3.0.P RE5-5+etch2_i386.deb


• Debian squid3-client_3.0.PRE5-5+etch2_i386.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-client_3. 0.PRE5-5+etch2_i386.deb


• Debian squid3-common_3.0.PRE5-5+etch2_all.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-common_3. 0.PRE5-5+etch2_all.deb


• Debian squid3_3.0.PRE5-5+etch2_i386.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3_3.0.PRE5- 5+etch2_i386.deb


• Debian squidclient_2.6.5-6etch5_i386.deb
  http://security.debian.org/pool/updates/main/s/squid/squidclient_2.6.5 -6etch5_i386.deb

Squid Web Proxy Cache 3.0.STABLE13

• Squid squid-3.0.STABLE22.tar.gz
  http://www.squid-cache.org/Versions/v3/3.0/squid-3.0.STABLE22.tar.gz

Debian Linux 5.0 armel

• Debian squid-common_2.7.STABLE3-4.1lenny1_all.deb
  http://security.debian.org/pool/updates/main/s/squid/squid-common_2.7. STABLE3-4.1lenny1_all.deb


• Debian squid3-cgi_3.0.STABLE8-3+lenny3_armel.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-cgi_3.0.S TABLE8-3+lenny3_armel.deb


• Debian squid3-common_3.0.STABLE8-3+lenny3_all.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-common_3. 0.STABLE8-3+lenny3_all.deb


• Debian squid3_3.0.STABLE8-3+lenny3_armel.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3_3.0.STABL E8-3+lenny3_armel.deb


• Debian squidclient_3.0.STABLE8-3+lenny3_armel.deb
  http://security.debian.org/pool/updates/main/s/squid3/squidclient_3.0. STABLE8-3+lenny3_armel.deb

Mandriva Linux Mandrake 2009.0 x86_64

• Mandriva squid-3.0-22.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva squid-cachemgr-3.0-22.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 mips

• Debian squid-common_2.7.STABLE3-4.1lenny1_all.deb
  http://security.debian.org/pool/updates/main/s/squid/squid-common_2.7. STABLE3-4.1lenny1_all.deb


• Debian squid3-common_3.0.STABLE8-3+lenny3_all.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-common_3. 0.STABLE8-3+lenny3_all.deb

Debian Linux 4.0 mips

• Debian squid-common_2.6.5-6etch5_all.deb
  http://security.debian.org/pool/updates/main/s/squid/squid-common_2.6. 5-6etch5_all.deb


• Debian squid3-common_3.0.PRE5-5+etch2_all.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-common_3. 0.PRE5-5+etch2_all.deb

Debian Linux 5.0 sparc

• Debian squid-cgi_2.7.STABLE3-4.1lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/s/squid/squid-cgi_2.7.STA BLE3-4.1lenny1_sparc.deb


• Debian squid-common_2.7.STABLE3-4.1lenny1_all.deb
  http://security.debian.org/pool/updates/main/s/squid/squid-common_2.7. STABLE3-4.1lenny1_all.deb


• Debian squid_2.7.STABLE3-4.1lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/s/squid/squid_2.7.STABLE3 -4.1lenny1_sparc.deb


• Debian squid3-cgi_3.0.STABLE8-3+lenny3_sparc.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-cgi_3.0.S TABLE8-3+lenny3_sparc.deb


• Debian squid3-common_3.0.STABLE8-3+lenny3_all.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-common_3. 0.STABLE8-3+lenny3_all.deb


• Debian squid3_3.0.STABLE8-3+lenny3_sparc.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3_3.0.STABL E8-3+lenny3_sparc.deb


• Debian squidclient_3.0.STABLE8-3+lenny3_sparc.deb
  http://security.debian.org/pool/updates/main/s/squid3/squidclient_3.0. STABLE8-3+lenny3_sparc.deb

Debian Linux 4.0 arm

• Debian squid-common_2.6.5-6etch5_all.deb
  http://security.debian.org/pool/updates/main/s/squid/squid-common_2.6. 5-6etch5_all.deb


• Debian squid3-common_3.0.PRE5-5+etch2_all.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-common_3. 0.PRE5-5+etch2_all.deb

Mandriva Linux Mandrake 2009.1 x86_64

• Mandriva squid-3.0-22.2mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva squid-cachemgr-3.0-22.2mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/

Debian Linux 4.0 powerpc

• Debian squid-common_2.6.5-6etch5_all.deb
  http://security.debian.org/pool/updates/main/s/squid/squid-common_2.6. 5-6etch5_all.deb


• Debian squid3-common_3.0.PRE5-5+etch2_all.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-common_3. 0.PRE5-5+etch2_all.deb

Debian Linux 4.0 m68k

• Debian squid-common_2.6.5-6etch5_all.deb
  http://security.debian.org/pool/updates/main/s/squid/squid-common_2.6. 5-6etch5_all.deb


• Debian squid3-common_3.0.PRE5-5+etch2_all.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-common_3. 0.PRE5-5+etch2_all.deb

MandrakeSoft Enterprise Server 5

• Mandriva squid-3.0-22.2mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva squid-cachemgr-3.0-22.2mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 s/390

• Debian squid-common_2.7.STABLE3-4.1lenny1_all.deb
  http://security.debian.org/pool/updates/main/s/squid/squid-common_2.7. STABLE3-4.1lenny1_all.deb


• Debian squid3-cgi_3.0.STABLE8-3+lenny3_s390.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-cgi_3.0.S TABLE8-3+lenny3_s390.deb


• Debian squid3-common_3.0.STABLE8-3+lenny3_all.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-common_3. 0.STABLE8-3+lenny3_all.deb


• Debian squid3_3.0.STABLE8-3+lenny3_s390.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3_3.0.STABL E8-3+lenny3_s390.deb


• Debian squidclient_3.0.STABLE8-3+lenny3_s390.deb
  http://security.debian.org/pool/updates/main/s/squid3/squidclient_3.0. STABLE8-3+lenny3_s390.deb

Squid Web Proxy Cache 3.1.0.15

• Squid squid-3.1.0.16.tar.gz
  http://www.squid-cache.org/Versions/v3/3.1/squid-3.1.0.16.tar.gz

Debian Linux 5.0 hppa

• Debian squid-cgi_2.7.STABLE3-4.1lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/s/squid/squid-cgi_2.7.STA BLE3-4.1lenny1_hppa.deb


• Debian squid-common_2.7.STABLE3-4.1lenny1_all.deb
  http://security.debian.org/pool/updates/main/s/squid/squid-common_2.7. STABLE3-4.1lenny1_all.deb


• Debian squid_2.7.STABLE3-4.1lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/s/squid/squid_2.7.STABLE3 -4.1lenny1_hppa.deb


• Debian squid3-cgi_3.0.STABLE8-3+lenny3_hppa.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-cgi_3.0.S TABLE8-3+lenny3_hppa.deb


• Debian squid3-common_3.0.STABLE8-3+lenny3_all.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-common_3. 0.STABLE8-3+lenny3_all.deb


• Debian squid3_3.0.STABLE8-3+lenny3_hppa.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3_3.0.STABL E8-3+lenny3_hppa.deb


• Debian squidclient_3.0.STABLE8-3+lenny3_hppa.deb
  http://security.debian.org/pool/updates/main/s/squid3/squidclient_3.0. STABLE8-3+lenny3_hppa.deb

Debian Linux 4.0 sparc

• Debian squid-cgi_2.6.5-6etch5_sparc.deb
  http://security.debian.org/pool/updates/main/s/squid/squid-cgi_2.6.5-6 etch5_sparc.deb


• Debian squid-common_2.6.5-6etch5_all.deb
  http://security.debian.org/pool/updates/main/s/squid/squid-common_2.6. 5-6etch5_all.deb


• Debian squid_2.6.5-6etch5_sparc.deb
  http://security.debian.org/pool/updates/main/s/squid/squid_2.6.5-6etch 5_sparc.deb


• Debian squid3-cgi_3.0.PRE5-5+etch2_sparc.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-cgi_3.0.P RE5-5+etch2_sparc.deb


• Debian squid3-client_3.0.PRE5-5+etch2_sparc.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-client_3. 0.PRE5-5+etch2_sparc.deb


• Debian squid3-common_3.0.PRE5-5+etch2_all.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-common_3. 0.PRE5-5+etch2_all.deb


• Debian squid3_3.0.PRE5-5+etch2_sparc.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3_3.0.PRE5- 5+etch2_sparc.deb


• Debian squidclient_2.6.5-6etch5_sparc.deb
  http://security.debian.org/pool/updates/main/s/squid/squidclient_2.6.5 -6etch5_sparc.deb

Debian Linux 5.0 m68k

• Debian squid-common_2.7.STABLE3-4.1lenny1_all.deb
  http://security.debian.org/pool/updates/main/s/squid/squid-common_2.7. STABLE3-4.1lenny1_all.deb


• Debian squid3-common_3.0.STABLE8-3+lenny3_all.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-common_3. 0.STABLE8-3+lenny3_all.deb

Squid Web Proxy Cache 3.0.STABLE12

• Squid squid-3.0.STABLE22.tar.gz
  http://www.squid-cache.org/Versions/v3/3.0/squid-3.0.STABLE22.tar.gz

Mandriva Linux Mandrake 2009.0

• Mandriva squid-3.0-22.2mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva squid-cachemgr-3.0-22.2mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/

Squid Web Proxy Cache 3.1.0.11

• Squid squid-3.1.0.16.tar.gz
  http://www.squid-cache.org/Versions/v3/3.1/squid-3.1.0.16.tar.gz

Debian Linux 5.0 ia-64

• Debian squid-cgi_2.7.STABLE3-4.1lenny1_ia64.deb
  http://security.debian.org/pool/updates/main/s/squid/squid-cgi_2.7.STA BLE3-4.1lenny1_ia64.deb


• Debian squid-common_2.7.STABLE3-4.1lenny1_all.deb
  http://security.debian.org/pool/updates/main/s/squid/squid-common_2.7. STABLE3-4.1lenny1_all.deb


• Debian squid_2.7.STABLE3-4.1lenny1_ia64.deb
  http://security.debian.org/pool/updates/main/s/squid/squid_2.7.STABLE3 -4.1lenny1_ia64.deb


• Debian squid3-cgi_3.0.STABLE8-3+lenny3_ia64.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-cgi_3.0.S TABLE8-3+lenny3_ia64.deb


• Debian squid3-common_3.0.STABLE8-3+lenny3_all.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3-common_3. 0.STABLE8-3+lenny3_all.deb


• Debian squid3_3.0.STABLE8-3+lenny3_ia64.deb
  http://security.debian.org/pool/updates/main/s/squid3/squid3_3.0.STABL E8-3+lenny3_ia64.deb


• Debian squidclient_3.0.STABLE8-3+lenny3_ia64.deb
  http://security.debian.org/pool/updates/main/s/squid3/squidclient_3.0. STABLE8-3+lenny3_ia64.deb

Mandriva Linux Mandrake 2008.0 x86_64

• Mandriva squid-2.6.STABLE16-1.5mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva squid-cachemgr-2.6.STABLE16-1.5mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Squid Web Proxy Cache 3.0 PRE3

• Squid squid-3.0.STABLE22.tar.gz
  http://www.squid-cache.org/Versions/v3/3.0/squid-3.0.STABLE22.tar.gz

Squid Web Proxy Cache 3.0 PRE1

• Squid squid-3.0.STABLE22.tar.gz
  http://www.squid-cache.org/Versions/v3/3.0/squid-3.0.STABLE22.tar.gz

Squid Web Proxy Cache 3.0 PRE2

• Squid squid-3.0.STABLE22.tar.gz
  http://www.squid-cache.org/Versions/v3/3.0/squid-3.0.STABLE22.tar.gz

Squid Web Proxy Cache 3.1 .5

• Squid squid-3.1.0.16.tar.gz
  http://www.squid-cache.org/Versions/v3/3.1/squid-3.1.0.16.tar.gz

MandrakeSoft Corporate Server 4.0 x86_64

• Mandriva squid-2.6.STABLE1-4.7.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva squid-cachemgr-2.6.STABLE1-4.7.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/

Squid Header-Only Packets Remote Denial of Service Vulnerability

References:

• cat /proc/sys//net//ipv4//fuckups (Fabian �??fabs�?? Yamaguchi)
  
• PatchSet 12597 (Squid)
  
• revno: 9151 (Squid)
  
• Squid Web Proxy Cache Homepage (Squid)
  
• Squid Proxy Cache Security Update Advisory SQUID-2010:1 (Squid)