CVE-2010-0639

The htcpHandleTstRequest function in htcp.c in Squid 2.x before 2.6.STABLE24 and 2.7 before 2.7.STABLE8, and htcp.cc in 3.0 before 3.0.STABLE24, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via crafted packets to the HTCP port.

• http://bugs.squid-cache.org/show_bug.cgi?id=2858
• http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035961.html
• http://lists.fedoraproject.org/pipermail/package-announce/2010-March/037159.html
• http://osvdb.org/62297
• http://secunia.com/advisories/38812Vendor Advisory
• http://www.securityfocus.com/bid/38212
• http://www.securitytracker.com/id?1023587
• http://www.squid-cache.org/Advisories/SQUID-2010_2.txtVendor Advisory
• http://www.squid-cache.org/Versions/v2/2.7/changesets/12600.patchPatch
• http://www.squid-cache.org/Versions/v3/3.0/changesets/3.0-ADV-2010_2.patchPatch
• http://www.vupen.com/english/advisories/2010/0371Vendor Advisory
• http://www.vupen.com/english/advisories/2010/0603Vendor Advisory
• http://bugs.squid-cache.org/show_bug.cgi?id=2858
• http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035961.html
• http://lists.fedoraproject.org/pipermail/package-announce/2010-March/037159.html
• http://osvdb.org/62297
• http://secunia.com/advisories/38812Vendor Advisory
• http://www.securityfocus.com/bid/38212
• http://www.securitytracker.com/id?1023587
• http://www.squid-cache.org/Advisories/SQUID-2010_2.txtVendor Advisory
• http://www.squid-cache.org/Versions/v2/2.7/changesets/12600.patchPatch
• http://www.squid-cache.org/Versions/v3/3.0/changesets/3.0-ADV-2010_2.patchPatch
• http://www.vupen.com/english/advisories/2010/0371Vendor Advisory
• http://www.vupen.com/english/advisories/2010/0603Vendor Advisory

Published

Feb 15, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-0633Unspecified vulnerability in Citrix XenServer 5.0 Update 3 a…
• CVE-2010-0634Unspecified vulnerability in Fast Lexical Analyzer Generator…
• CVE-2010-0635SQL injection vulnerability in the plgSearchEventsearch::onS…
• CVE-2010-0636Multiple cross-site scripting (XSS) vulnerabilities in WebCa…
• CVE-2010-0637Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2010-0638Cross-site request forgery (CSRF) vulnerability in WebCalend…
• CVE-2010-0640Cross-site scripting (XSS) vulnerability in CA eHealth Perfo…
• CVE-2010-0641Cross-site scripting (XSS) vulnerability in webline/html/adm…
• CVE-2010-0642Cisco Collaboration Server (CCS) 5 allows remote attackers t…
• CVE-2010-0643Google Chrome before 4.0.249.89 attempts to make direct conn…
• CVE-2010-0644Google Chrome before 4.0.249.89, when a SOCKS 5 proxy server…
• CVE-2010-0645Multiple integer overflows in factory.cc in Google V8 before…