CVE:CVE-2005-2794
CNNVD:CNNVD-200509-046
Squid是一个高效的Web缓存及代理程序，最初是为Unix平台开发的，现在也被移植到Linux和大多数的Unix类系统中。最新的Squid可以运行在Windows平台下。
Squid 2.5.STABLE10及更早版本的store.c允许远程攻击者发送可以触发有关STORE_PENDING断言错误的终止请求，导致sslConnectTimeout函数中出现分段错误，造成Squid崩溃。
solution:Upgrade squid squid to a higher version than 2.0.patch1,2.0.patch2,2.0.pre1,2.0.release,2.1.patch1,2.1.patch2,2.1.pre1,2.1.pre3,2.1.pre4,2.1.release,2.2.devel3,2.2.devel4,2.2.pre1,2.2.pre2,2.2.stable1,2.2.stable2,2.2.stable3,2.2.stable4,2.2.stable5,2.3.devel2,2.3.devel3,2.3.stable1,2.3.stable2,2.3.stable3,2.3.stable4,2.3.stable5,2.4.stable1,2.4.stable2,2.4.stable3,2.4.stable4,2.4.stable6,2.4.stable7,2.5.stable1,2.5.stable2,2.5.stable3,2.5.stable4,2.5.stable5,2.5.stable6,2.5.stable7,2.5.stable8,2.5.stable9,2.5.stable10,and avoid the version 2.0.patch1,2.0.patch2,2.0.pre1,2.0.release,2.1.patch1,2.1.patch2,2.1.pre1,2.1.pre3,2.1.pre4,2.1.release,2.2.devel3,2.2.devel4,2.2.pre1,2.2.pre2,2.2.stable1,2.2.stable2,2.2.stable3,2.2.stable4,2.2.stable5,2.3.devel2,2.3.devel3,2.3.stable1,2.3.stable2,2.3.stable3,2.3.stable4,2.3.stable5,2.4.stable1,2.4.stable2,2.4.stable3,2.4.stable4,2.4.stable6,2.4.stable7,2.5.stable1,2.5.stable2,2.5.stable3,2.5.stable4,2.5.stable5,2.5.stable6,2.5.stable7,2.5.stable8,2.5.stable9,2.5.stable10