Mandriva Linux Security Advisory : squid (MDVSA-2008:002)

Medium Nessus Plugin ID 36545


The remote Mandriva Linux host is missing one or more security updates.


The cache update reply processing functionality in Squid 2.x before 2.6.STABLE17, and Squid 3.0, allows remote attackers to cause a denial of service (crash) via unknown vectors related to HTTP headers.

The updated package fixes this issue.


Update the affected squid and / or squid-cachemgr packages.

Plugin Details

Severity: Medium

ID: 36545

File Name: mandriva_MDVSA-2008-002.nasl

Version: $Revision: 1.11 $

Type: local

Published: 2009/04/23

Modified: 2013/06/01

Dependencies: 12634

Risk Information

Risk Factor: Medium


Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Information

CPE: p-cpe:/a:mandriva:linux:squid, p-cpe:/a:mandriva:linux:squid-cachemgr, cpe:/o:mandriva:linux:2007, cpe:/o:mandriva:linux:2007.1, cpe:/o:mandriva:linux:2008.0

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/Mandrake/release, Host/Mandrake/rpm-list

Patch Publication Date: 2008/01/04

Reference Information

CVE: CVE-2007-6239

MDVSA: 2008:002

CWE: 20