Referenced CVEs:
CVE-2007-6239


Description:
=========================================================== Ubuntu Security Notice USN-565-1 January 09, 2008squid vulnerabilityCVE-2007-6239===========================================================A security issue affects the following Ubuntu releases:Ubuntu 6.06 LTSUbuntu 6.10Ubuntu 7.04Ubuntu 7.10This advisory also applies to the corresponding versions ofKubuntu, Edubuntu, and Xubuntu.The problem can be corrected by upgrading your system to thefollowing package versions:Ubuntu 6.06 LTS: squid 2.5.12-4ubuntu2.3Ubuntu 6.10: squid 2.6.1-3ubuntu1.5Ubuntu 7.04: squid 2.6.5-4ubuntu2.1Ubuntu 7.10: squid 2.6.14-1ubuntu2.1In general, a standard system upgrade is sufficient to effect thenecessary changes.Details follow:It was discovered that Squid did not always clean up cache memorycorrectly. A remote attacker could manipulate cache update replies andcause Squid to use all available memory, leading to a denial of service.





More...