Definition

The clientProcessRequest() function in src/client_side.c in Squid 2.6 before 2.6.STABLE12 allows remote attackers to cause a denial of service (daemon crash) via crafted TRACE requests that trigger an assertion error.

oval:org.mitre.oval:def:10291

The clientProcessRequest() function in src/client_side.c in Squid 2.6 before 2.6.STABLE12 allows remote attackers to cause a denial of service (daemon crash) via crafted TRACE requests that trigger an assertion error.

Family:

unix

Status:

ACCEPTED

Platform(s):

CentOS Linux 5
Oracle Linux 5
Red Hat Enterprise Linux 5

Class:

vulnerability

Reference(s):

CVE-2007-1560

Product(s):