QwikSec

Security Database

CVE

CWE

Training

CVE-2013-0189

Published: Feb 8, 2013

Modified: Aug 6, 2024

PUBLISHED

Description

cachemgr.cgi in Squid 3.1.x and 3.2.x, possibly 3.1.22, 3.2.4, and other versions, allows remote attackers to cause a denial of service (resource consumption) via a crafted request. NOTE: this issue is due to an incorrect fix for CVE-2012-5643, possibly involving an incorrect order of arguments or incorrect comparison.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://www.squid-cache.org/Versions/v3/3.1/changesets/SQUID-2012_1.patch

x_refsource_MISC

vendor-advisory

x_refsource_DEBIAN

vendor-advisory

x_refsource_MANDRIVA

vendor-advisory

x_refsource_UBUNTU

http://bazaar.launchpad.net/~squid/squid/3.2/revision/11744

x_refsource_CONFIRM

SUSE-SU-2016:1996

vendor-advisory

x_refsource_SUSE

https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0029

x_refsource_CONFIRM

https://bugzilla.redhat.com/show_bug.cgi?id=887962#c9

x_refsource_MISC

openSUSE-SU-2013:1443

vendor-advisory

x_refsource_SUSE

http://www.squid-cache.org/Versions/v3/3.2/changesets/SQUID-2012_1.patch

x_refsource_MISC

[scm-commits] 20130125 [squid/f17] CVE-2013-0189: Incomplete fix for the CVE-2012-5643

mailing-list

x_refsource_MLIST

third-party-advisory

x_refsource_SECUNIA

http://bazaar.launchpad.net/~squid/squid/3.2/revision/11743

x_refsource_CONFIRM

third-party-advisory

x_refsource_SECUNIA

SUSE-SU-2016:2089

vendor-advisory

x_refsource_SUSE

vdb-entry

x_refsource_BID

openSUSE-SU-2013:1436

vendor-advisory

x_refsource_SUSE

https://bugzilla.redhat.com/show_bug.cgi?id=895972

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.