Info

Disclosure

Aug 28, 2011

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Aug 28, 2011

Description

Classification

Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Integrity
Solution: Upgrade
Exploit: Exploit Private
Disclosure: Vendor Verified

Solution

Upgrade to version 3.0.STABLE26 or 3.1.15 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Unknown or Incomplete

References

Security Tracker: 1025981
Related OSVDB ID: 12887
CVE ID: 2011-3205 (see also: NVD)
Secunia Advisory ID: 45805 45906 45920 45965 46029 46604 47629
Bugtraq ID: 49356
Vendor Specific Advisory URL: http://blogs.oracle.com/sunsecurity/entry/cve_2011_3205_buffer_overflow
http://www.debian.org/security/2011/dsa-2304
http://www.squid-cache.org/Advisories/SQUID-2011_3.txt
Vendor Specific News/Changelog Entry: http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065534.html
http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00012.html
http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00013.html
http://security.gentoo.org/glsa/glsa-201110-24.xml
http://www.squid-cache.org/Versions/v2/2.HEAD/changesets/12710.patch
http://www.squid-cache.org/Versions/v3/3.0/changesets/squid-3.0-9193.patch
http://www.squid-cache.org/Versions/v3/3.1/changesets/squid-3.1-10363.patch
http://www.squid-cache.org/Versions/v3/3.2/changesets/squid-3.2-11294.patch
https://bugzilla.redhat.com/show_bug.cgi?id=734583
Other Advisory URL: http://openwall.com/lists/oss-security/2011/08/29/2
http://openwall.com/lists/oss-security/2011/08/30/4
http://openwall.com/lists/oss-security/2011/08/30/8
http://www.mandriva.com/security/advisories?name=MDVSA-2011:150
RedHat RHSA: RHSA-2011:1293

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/74847