CVE-2006-0046

HIGH 7.8CVE-2006-0046 · Published 13/02/2006 · updated 16/06/2026

In short

CVE-2006-0046 is a HIGH (CVSS 7.8) vulnerability affecting adzapper (cameron simpson).
Chance of exploitation in the next 30 days (EPSS): 2.7%, higher than 86.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
adzapper cameron_simpson	`= 2006-01-01= 2006-01-05= 2006-01-07= 2006-01-14= 2006-01-15= 2006-01-23= 2006-01-24= 2006-01-25= 2006-01-28= 2006-01-29`	No fix yet

Description

squid_redirect script in adzapper before 2006-01-29 allows remote attackers to cause a denial of service (CPU consumption) via a URL with a large number of trailing / (forward slashes), which might produce inefficient regular expressions.

References

adzapper.sourceforge.net/cvslog.html
bugs.debian.org/cgi-bin/bugreport.cgi/squid_redirect.diff
bugs.debian.org/cgi-bin/bugreport.cgi
secunia.com/advisories/18771 · Patch
secunia.com/advisories/18777 · Patch
debian.org/security/2006/dsa-966 · Patch
osvdb.org/22900
securityfocus.com/bid/16558
vupen.com/english/advisories/2006/0491
exchange.xforce.ibmcloud.com/vulnerabilities/24640

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free