Gentoo Linux Security Advisory GLSA 200703-27 – Squid incorrectly handles TRACE requests that contain a Max-Forwards header field with value 0 in the clientProcessRequest() function. Versions less than 2.6.12 are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/55518/glsa-200703-27.txt
Source: https://packetstormsecurity.com/files/55518/Gentoo-Linux-Security-Advisory-200703-27.html