CVE-2005-2796
Published · Updated
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 7.8%
exploitation probability
7.8%top 5% of all CVEs
observed exploitation
nono source reports it
The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (segmentation fault) via certain crafted requests.
Affected products
n/a · n/aReferences
http://fedoranews.org/updates/FEDORA--.shtmlhttp://secunia.com/advisories/16977http://secunia.com/advisories/17027http://securitytracker.com/id?1014846https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10522http://www.debian.org/security/2005/dsa-809http://www.gentoo.org/security/en/glsa/glsa-200509-06.xmlhttp://www.mandriva.com/security/advisories?name=MDKSA-2005:162http://www.novell.com/linux/security/advisories/2005_21_sr.htmlhttp://www.novell.com/linux/security/advisories/2005_53_squid.htmlhttp://www.redhat.com/support/errata/RHSA-2005-766.htmlhttp://www.securityfocus.com/bid/14731