Bugtraq mailing list archives

Re: Squid 3.2.7 DoS (loop, 100% cpu) strHdrAcptLangGetItem() at errorpage.cc


From: Amos Jeffries <amos () treenet co nz>
Date: Fri, 08 Mar 2013 13:37:35 +1300

On 6/03/2013 9:53 a.m., tytusromekiatomek () hushmail com wrote:
################################################################
# DoS (loop, 100% cpu) strHdrAcptLangGetItem() at errorpage.cc #
################################################################
#
# Authors:
#
# 22733db72ab3ed94b5f8a1ffcde850251fe6f466
# c8e74ebd8392fda4788179f9a02bb49337638e7b
# AKAT-1
#
#######################################

# Versions: 3.2.5, 3.2.7

Thank you very much for reporting this to us upstream and ensuring a patch was available before publishing it publicly *cough*.
This has now been fixed.

Would you care to do better on the other ones before someone else has a chance to mail your exploit to our bugs@ address and grab all the discovery glory?

Amos Jeffries
Squid Project


Current thread: