squid DoS

From: Vladimir Ivaschenko (hazard@francoudi.com)
Date: Fri Sep 21 2001 - 10:48:47 CEST


Dear All,

I'd like to inform about a DoS bug I recently found in SQUID regarding
handling of mkdir-only PUT requests - please look at
http://www.squid-cache.org/bugs/show_bug.cgi?id=233 for more info.
>From my testing, it applies both to Squid 2.3 and 2.4 series. Tested on
RedHat 6.2 and 7.1.

This bug has been fixed by SQUID developers on Sep 18 and has been known
for about two weeks - I think its time to inform Bugtraq.

--
Best Regards
Vladimir Ivaschenko
Certified Linux Engineer (RHCE)
http://www.hazard.maks.net/



This archive was generated by hypermail 2.1.2 : Mon Sep 24 2001 - 12:38:56 CEST