The WCCP message parsing code in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via malformed WCCP messages with source addresses that are spoofed to reference Squids home router and invalid WCCP_I_SEE_YOU cache numbers.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Squid | Squid | 2.0_patch2 (including) | 2.0_patch2 (including) |
| Squid | Squid | 2.1_patch2 (including) | 2.1_patch2 (including) |
| Squid | Squid | 2.3_.stable4 (including) | 2.3_.stable4 (including) |
| Squid | Squid | 2.3_.stable5 (including) | 2.3_.stable5 (including) |
| Squid | Squid | 2.3_stable5 (including) | 2.3_stable5 (including) |
| Squid | Squid | 2.4 (including) | 2.4 (including) |
| Squid | Squid | 2.4_.stable2 (including) | 2.4_.stable2 (including) |
| Squid | Squid | 2.4_.stable6 (including) | 2.4_.stable6 (including) |
| Squid | Squid | 2.4_.stable7 (including) | 2.4_.stable7 (including) |
| Squid | Squid | 2.4_stable7 (including) | 2.4_stable7 (including) |
| Squid | Squid | 2.5.6 (including) | 2.5.6 (including) |
| Squid | Squid | 2.5.stable1 (including) | 2.5.stable1 (including) |
| Squid | Squid | 2.5.stable2 (including) | 2.5.stable2 (including) |
| Squid | Squid | 2.5.stable3 (including) | 2.5.stable3 (including) |
| Squid | Squid | 2.5.stable4 (including) | 2.5.stable4 (including) |
| Squid | Squid | 2.5.stable5 (including) | 2.5.stable5 (including) |
| Squid | Squid | 2.5.stable6 (including) | 2.5.stable6 (including) |
| Squid | Squid | 2.5.stable7 (including) | 2.5.stable7 (including) |
| Squid | Squid | 2.5_.stable1 (including) | 2.5_.stable1 (including) |
| Squid | Squid | 2.5_.stable3 (including) | 2.5_.stable3 (including) |
| Squid | Squid | 2.5_.stable4 (including) | 2.5_.stable4 (including) |
| Squid | Squid | 2.5_.stable5 (including) | 2.5_.stable5 (including) |
| Squid | Squid | 2.5_.stable6 (including) | 2.5_.stable6 (including) |
| Squid | Squid | 2.5_stable3 (including) | 2.5_stable3 (including) |
| Squid | Squid | 2.5_stable4 (including) | 2.5_stable4 (including) |
| Squid | Squid | 2.5_stable9 (including) | 2.5_stable9 (including) |
| Squid | Squid | 2.6.stable1 (including) | 2.6.stable1 (including) |
| Red Hat Enterprise Linux 3 | RedHat | squid-7:2.5.STABLE3-6.3E.7 | * |
| Red Hat Enterprise Linux 4 | RedHat | squid-7:2.5.STABLE6-3.4E.3 | * |
| Squid | Ubuntu | dapper | * |
| Squid | Ubuntu | devel | * |
| Squid | Ubuntu | edgy | * |
| Squid | Ubuntu | feisty | * |