TITLE
squid compressed DNS answer message boundary failure
/TITLE

SYNOPSIS
From Squid advisory SQUID-2002:2 : Error and boundary conditions
were not checked when handling compressed DNS answer messages in
the internal DNS code (lib/rfc1035.c). A malicious DNS server
could craft a DNS reply that would cause Squid to exit with
a SIGSEGV.
/SYNOPSIS


INCIDENTS
sr862189, fz520428, erg712012
/INCIDENTS

ACKNOWLEDGEMENTS
This vulnerability was discovered and researched by zen-parse
<zen-parse@gmx.net>.
/ACKNOWLEDGEMENTS

REFERENCES
http://www.squid-cache.org/Advisories/SQUID-2002_2.txt
/REFERENCES
#
# The next three items can be thought of as an array of structures.
# The first element in each is the first structure, and so on.
#
PRODUCTS
openserver506a
/PRODUCTS

PACKAGES
VOL.000.000 VOL.000.001 VOL.000.002 VOL.000.003
/PACKAGES

URL
ftp://ftp.caldera.com/pub/updates/OpenServer/CSSA-2002-SCO.26
/URL