Submitted by KeesCook on Mon, 2007-03-26 19:27
Referenced CVEs:
CVE-2007-1560
Description:
===========================================================
Ubuntu Security Notice USN-441-1 March 26, 2007
squid vulnerability
CVE-2007-1560
===========================================================
A security issue affects the following Ubuntu releases:
Ubuntu 6.10
This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.
The problem can be corrected by upgrading your system to the
following package versions:
Ubuntu 6.10:
squid-common 2.6.1-3ubuntu1.3
In general, a standard system upgrade is sufficient to effect the
necessary changes.
Details follow:
A flaw was discovered in Squid's handling of the TRACE request method
which could lead to a crash. Remote attackers with access to the Squid
server could send malicious TRACE requests, and cause a denial of
service.


