CVE-2004-0918

Description

The asn_parse_header function (asn1.c) in the SNMP module for Squid Web Proxy Cache before 2.4.STABLE7 allows remote attackers to cause a denial of service (server restart) via certain SNMP packets with negative length fields that trigger a memory allocation error.

Affected products

gentoo / linux
openpkg / openpkg2.1 – 2.1
openpkg / openpkg2.2 – 2.2
openpkg / openpkgcurrent – current
RedHat / fedora_corecore_2.0 – core_2.0
squid / squid2.4 – 2.4
squid / squid2.4_.stable2 – 2.4_.stable2
squid / squid2.4_.stable6 – 2.4_.stable6
squid / squid2.4_.stable7 – 2.4_.stable7
squid / squid2.5_.stable1 – 2.5_.stable1
squid / squid2.5_.stable3 – 2.5_.stable3
squid / squid2.5_.stable5 – 2.5_.stable5
squid / squid2.5_.stable6 – 2.5_.stable6
squid / squid3.0_pre1 – 3.0_pre1
squid / squid3.0_pre2 – 3.0_pre2
squid / squid3.0_pre3 – 3.0_pre3
squid / squid2.5_.stable4 – 2.5_.stable4
squid / squid2.0_patch2 – 2.0_patch2
squid / squid2.1_patch2 – 2.1_patch2
squid / squid2.3_.stable4 – 2.3_.stable4
squid / squid2.3_.stable5 – 2.3_.stable5
trustix / secure_linux1.5 – 1.5
trustix / secure_linux2.0 – 2.0
trustix / secure_linux2.1 – 2.1
Ubuntu / ubuntu_linux4.1 – 4.1
Ubuntu / ubuntu_linux4.1 – 4.1

Description

Affected products

References