-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
--------------------------------------------------------------------------
Turbolinux Security Advisory TLSA-2007-17
http://www.turbolinux.co.jp/security/
security-team@turbolinux.co.jp
--------------------------------------------------------------------------
Original released date: 14 Mar 2007
Last revised: 14 Mar 2007
Package: squid
Summary: Squid denial of service attack
More information:
Squid is a high-performance proxy caching server for web clients,
supporting FTP, gopher and HTTP data objects. Unlike traditional
caching software, Squid handles all requests in a single, non-blocking,
I/O-driven process.
Squid allows remote attackers to cause a denial of service (crash) via crafted FTP directory.
Squid allows remote attackers to cause a denial of service (crash) by causing a queue overload.
Impact:
The vulnerability allows remote attackers to cause a denial of service.
Affected Products:
- Turbolinux Appliance Server 2.0
- Turbolinux 10 Server x64 Edition
- Turbolinux Appliance Server 1.0 Hosting Edition
- Turbolinux Appliance Server 1.0 Workgroup Edition
- Turbolinux 10 Server
- Turbolinux 8 Server
<Turbolinux Appliance Server 2.0>
Source Packages
Size: MD5
squid-2.5.STABLE10-5.src.rpm
1573050 1f14dcc915a89c1a39d2cca842ada94e
Binary Packages
Size: MD5
squid-2.5.STABLE10-5.i586.rpm
882602 2a89f94e25f0cd5608f9dcfb936de2a4
<Turbolinux 10 Server x64 Edition>
Source Packages
Size: MD5
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/updates/SRPMS/squid-2.5.STABLE10-5.src.rpm
1573050 f50c7840b2ea45a5039078cdc00ef831
Binary Packages
Size: MD5
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/updates/RPMS/squid-2.5.STABLE10-5.x86_64.rpm
955783 cc29334d508af40ca48f8a9706e05bcc
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/updates/RPMS/squid-debug-2.5.STABLE10-5.x86_64.rpm
1544853 dbc95922f6fe67126cb551da4b4b7d97
<Turbolinux Appliance Server 1.0 Hosting Edition>
Source Packages
Size: MD5
squid-2.5.STABLE10-5.src.rpm
1573050 df01932f8a38a6317b51c30f3a05f466
Binary Packages
Size: MD5
squid-2.5.STABLE10-5.i586.rpm
855822 6f5960dec22198834d1787c685001273
<Turbolinux Appliance Server 1.0 Workgroup Edition>
Source Packages
Size: MD5
squid-2.5.STABLE10-5.src.rpm
1573050 c69e8bea5e8afbbf0bee24b944909478
Binary Packages
Size: MD5
squid-2.5.STABLE10-5.i586.rpm
856347 ed6a032a53d66278db4d0d1f6eabe6e5
<Turbolinux 10 Server>
Source Packages
Size: MD5
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/updates/SRPMS/squid-2.5.STABLE10-5.src.rpm
1573050 1f14dcc915a89c1a39d2cca842ada94e
Binary Packages
Size: MD5
squid-2.5.STABLE10-5.i586.rpm
882602 2a89f94e25f0cd5608f9dcfb936de2a4
squid-debug-2.5.STABLE10-5.i586.rpm
1550874 621dce025c8b144b1b3b9b467d270641
<Turbolinux 8 Server>
Source Packages
Size: MD5
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/SRPMS/squid-2.5.STABLE10-5.src.rpm
1573050 513da4c36237d054cf852e5a6e5cec4b
Binary Packages
Size: MD5
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/squid-2.5.STABLE10-5.i586.rpm
857208 3bc727f1b933e0006c52125ec4a4b59b
References:
CVE
[CVE-2007-0247]
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0247
[CVE-2007-0248]
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0248
--------------------------------------------------------------------------
Revision History
14 Mar 2007 Initial release
--------------------------------------------------------------------------
Copyright(C) 2007 Turbolinux, Inc. All rights reserved.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)
iD8DBQFF93MdK0LzjOqIJMwRAlBVAJ4t5nW8ZoadsEASQO9qZK6jNEuL0QCfQCb5
jvziGbapNNqe3SySuA+ROns=
=aNi1
-----END PGP SIGNATURE-----
