Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Squid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of service (core dump) and possibly execute arbitrary code with an ftp:// URL with a larger number of special characters, which exceed the buffer when Squid URL-escapes the characters.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Squid Cache FTP代理URL缓冲区溢出漏洞
Vulnerability Description
Squid是一个运行于Linux/Unix系统下的Web服务代理程序。 Squid FTP代理程序在处理FTP URL时存在缓冲区溢出问题,远程攻击者可能利用这个漏洞对服务器程序实施拒绝服务攻击。 通过发送一个特别构造的ftp:// URL给Squid服务器程序,可能导致服务器程序崩溃,需要手工重启才能恢复功能。这个漏洞也有可能导致在服务器上以Squid进程的身份执行任意指令。
CVSS Information
N/A
Vulnerability Type
N/A