CVE-2006-0046
squid_redirect script in adzapper before 2006-01-29 allows remote attackers to cause a denial of...
squid_redirect script in adzapper before 2006-01-29 allows remote attackers to cause a denial of service (CPU consumption) via a URL with a large number of trailing / (forward slashes), which might produce inefficient regular expressions.
Exploit likelihood
What each source reports
NVD Score used
7.8
squid_redirect script in adzapper before 2006-01-29 allows remote attackers to cause a denial of service (CPU consumption) via a URL with a large number of trailing / (forward slashes), which might produce inefficient regular expressions.
- Record
CVE-2006-0046- CVSS 2.0
- 7.8 High
AV:N/AC:L/Au:N/C:N/I:N/A:C - Updated
- 2026-11-02
CVE List No score
squid_redirect script in adzapper before 2006-01-29 allows remote attackers to cause a denial of service (CPU consumption) via a URL with a large number of trailing / (forward slashes), which might produce inefficient regular expressions.
- Record
CVE-2006-0046- Updated
- 2026-11-02
EUVDEUVD-2006-0054 No score
squid_redirect script in adzapper before 2006-01-29 allows remote attackers to cause a denial of service (CPU consumption) via a URL with a large number of trailing / (forward slashes), which might produce inefficient regular expressions.
- Record
EUVD-2006-0054- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-593w-pcpp-m35w No score
squid_redirect script in adzapper before 2006-01-29 allows remote attackers to cause a denial of...
squid_redirect script in adzapper before 2006-01-29 allows remote attackers to cause a denial of service (CPU consumption) via a URL with a large number of trailing / (forward slashes), which might produce inefficient regular expressions.
- Record
GHSA-593w-pcpp-m35w- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
adzapperDebian:3.1 |
before 20050316-1sarge1, plus listed versions 20050316-1 |
20050316-1sarge1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-0046 is a high vulnerability (CVSS 7.8) in Cameron Simpson Adzapper, published February 9, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.70%, the 86th percentile. Fixed in adzapper 20050316-1sarge1.
References
vupen.com/english/advisories/2006/0491
secunia.com/advisories/18771
adzapper.sourceforge.net/cvslog.html
secunia.com/advisories/18777
securityfocus.com/bid/16558
debian.org/security/2006/dsa-966
Show 7 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/24640
bugs.debian.org/cgi-bin/bugreport.cgi?bug=350308
bugs.debian.org/cgi-bin/bugreport.cgi/squid_redirect.diff?bug=350308%3Bmsg=5%3Batt=1
osvdb.org/22900
nvd.nist.gov/vuln/detail/CVE-2006-0046
bugs.debian.org/cgi-bin/bugreport.cgi/squid_redirect.diff?bug=350308;msg=5;att=1
github.com/advisories/GHSA-593w-pcpp-m35w