The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers to cause a denial of service via a crafted auth header with certain comma delimiters that trigger an infinite loop of calls to the strcspn function.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2009-08-18T20:41:00
Updated: 2024-08-07T06:07:36.421Z
Reserved: 2009-08-18T00:00:00
Link: CVE-2009-2855
Vulnrichment
No data.
NVD
Status : Modified
Published: 2009-08-18T21:00:00.640
Modified: 2024-11-21T01:05:54.650
Link: CVE-2009-2855
Redhat