Squid Proxy 2.5/2.6 - FTP URI Remote Denial of Service

admin

0
文章

0
评论

2023-12-13 16:56:22 Ali_nvd 来源：ZONE.CI 全球网 0 阅读模式

中危 Squid Proxy 2.5/2.6 - FTP URI Remote Denial of Service

CVE编号

CVE-2007-0247

利用情况

POC 已公开

补丁情况

官方补丁

披露时间

2007-01-17

漏洞描述

squid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of service (core dump) via crafted FTP directory listing responses, possibly related to the (1) ftpListingFinish and (2) ftpHtmlifyListEntry functions.

解决建议

建议您更新当前系统或软件至最新版，完成漏洞的修复。

参考链接
http://fedoranews.org/cms/node/2442
http://osvdb.org/39839
http://secunia.com/advisories/23767
http://secunia.com/advisories/23805
http://secunia.com/advisories/23810
http://secunia.com/advisories/23837
http://secunia.com/advisories/23889
http://secunia.com/advisories/23921
http://secunia.com/advisories/23946
http://www.gentoo.org/security/en/glsa/glsa-200701-22.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2007:026
http://www.novell.com/linux/security/advisories/2007_12_squid.html
http://www.securityfocus.com/bid/22079
http://www.squid-cache.org/bugs/show_bug.cgi?id=1857
http://www.squid-cache.org/Versions/v2/2.6/squid-2.6.STABLE7-RELEASENOTES.html
http://www.trustix.org/errata/2007/0003/
http://www.ubuntu.com/usn/usn-414-1
http://www.vupen.com/english/advisories/2007/0199
https://exchange.xforce.ibmcloud.com/vulnerabilities/31523

受影响软件情况

1
#	类型	厂商	产品	版本	影响面
	运行在以下环境
	应用	squid	squid	2.6.stable1	-
	运行在以下环境
	应用	squid	squid	2.6.stable2	-
	运行在以下环境
	应用	squid	squid	2.6.stable3	-
	运行在以下环境
	应用	squid	squid	2.6.stable4	-
	运行在以下环境
	应用	squid	squid	2.6.stable5	-
	运行在以下环境
	应用	squid	squid	2.6.stable6	-
	运行在以下环境
	系统	debian_10	squid	*		Up to (excluding) 2.6.5-4
	运行在以下环境
	系统	debian_11	squid	*		Up to (excluding) 2.6.5-4
	运行在以下环境
	系统	debian_12	squid	*		Up to (excluding) 2.6.5-4
	运行在以下环境
	系统	debian_sid	squid	*		Up to (excluding) 2.6.5-4