• info
• discussion
• exploit
• solution
• references

Squid CONNECT/SSL Miss_Access DoS Vulnerability

Solution:
Upgrades are available.


National Science Foundation Squid Web Proxy 2.4 STABLE2

• Conectiva squid-2.4.1-4U70_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/7.0/RPMS/squid-2.4.1-4U70_2cl.i386 .rpm


• Conectiva squid-auth-2.4.1-4U70_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/7.0/RPMS/squid-auth-2.4.1-4U70_2cl .i386.rpm


• Conectiva squid-doc-2.4.1-4U70_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/7.0/RPMS/squid-doc-2.4.1-4U70_2cl. i386.rpm


• Conectiva squid-templates-2.4.1-4U70_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/7.0/RPMS/squid-templates-2.4.1-4U7 0_2cl.i386.rpm


• National Science Foundation squid-2.4.STABLE4-src.tar.gz
  http://www.squid-cache.org/Versions/v2/2.4/squid-2.4.STABLE4-src.tar.g z

National Science Foundation Squid Web Proxy 2.4 STABLE1

• National Science Foundation squid-2.4.STABLE4-src.tar.gz
  http://www.squid-cache.org/Versions/v2/2.4/squid-2.4.STABLE4-src.tar.g z