>> Squid Unspecified DNS Lookup Spoofing Vulnerability
Title : Squid Unspecified DNS Lookup Spoofing Vulnerability VUPEN ID : VUPEN/ADV-2005-0521 CVE ID : GENERIC-MAP-NOMATCH CWE ID : CWE-
Rated as : Low Risk
Remotely Exploitable : Yes Locally Exploitable : Yes Release Date : 2005-05-11
Technical Description
A new vulnerability was identified in Squid, which may be exploited by malicious users to conduct DNS lookup spoofing attacks. This flaw is due to an unspecified error in the DNS client when handling specially crafted DNS responses, which may be exploited by attackers to spoof DNS lookups. No further details have been disclosed.
