*** This bug has been split off bug 148882 *** ------- Original comment by Josh Bressers (Security Response Team) on 2005.02.16 10:58 ------- Squid 2.5.STABLE8 and earlier allows remote attackers to cause a denial of service (crash) via certain DNS responses regarding (1) Fully Qualified Domain Names (FQDN) in fqdncache.c or (2) IP addresses in ipcache.c, which trigger an assertion failure. http://secunia.com/advisories/14271 http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE8-dns_assert
This issue should also affect FC2
Released as: FC2 -> 2005-153 2005-02-22 FC3 -> 2005-154 2005-02-22