Description
The rfc1738_do_escape function in ftp.c for Squid 2.5 STABLE11 and earlier allows remote FTP servers to cause a denial of service (segmentation fault) via certain "odd" responses.
References
- 17626 third-party-advisory
- 1015085 vdb-entry
- 17287 third-party-advisory
- 17513 third-party-advisory
- 17338 third-party-advisory
- 17645 third-party-advisory
- 17271 third-party-advisory
- ADV-2005-2151 vdb-entry
- http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE11-rfc1738_do_escape
- SUSE-SR:2005:027 vendor-advisory
- 17407 third-party-advisory