Re: Squid 3.2.7 DoS (loop, 100% cpu) strHdrAcptLangGetItem() at errorpage.cc

From: Amos Jeffries <amos@treenet.co.nz>
To: bugtraq@securityfocus.com
Cc: tytusromekiatomek@hushmail.com
Subject: Re: Squid 3.2.7 DoS (loop, 100% cpu) strHdrAcptLangGetItem() at errorpage.cc
Date:


On 6/03/2013 9:53 a.m., tytusromekiatomek@hushmail.com wrote:
> ################################################################
> # DoS (loop, 100% cpu) strHdrAcptLangGetItem() at errorpage.cc #
> ################################################################
> #
> # Authors:
> #
> # 22733db72ab3ed94b5f8a1ffcde850251fe6f466
> # c8e74ebd8392fda4788179f9a02bb49337638e7b
> # AKAT-1
> #
> #######################################
>
> # Versions: 3.2.5, 3.2.7

Thank you very much for reporting this to us upstream and ensuring a 
patch was available before publishing it publicly *cough*.
This has now been fixed.

Would you care to do better on the other ones before someone else has a 
chance to mail your exploit to our bugs@ address and grab all the 
discovery glory?

Amos Jeffries
Squid Project





Copyright © 1995-2018 LinuxRocket.net. All rights reserved.