Family: Gentoo Local Security Checks --> Category: infos
[GLSA-200502-04] Squid: Multiple vulnerabilities Vulnerability Scan
Vulnerability Scan Summary
Squid: Multiple vulnerabilities
Detailed Explanation for this Vulnerability Test
The remote host is affected by the vulnerability described in GLSA-200502-04
(Squid: Multiple vulnerabilities)
Squid contains several vulnerabilities:
Buffer overflow when handling WCCP recvfrom()
Loose checking of HTTP headers (CVE-2005-0173 and
Incorrect handling of LDAP login names with spaces
A possible hacker could exploit:
the WCCP buffer overflow to cause Denial of Service.
the HTTP header parsing vulnerabilities to inject arbitrary
response data, potentially leading to content spoofing, web cache
poisoning and other cross-site scripting or HTTP response splitting
the LDAP issue to login with several variations of the same login
name, leading to log poisoning.
There is no known workaround at this time.
All Squid users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=www-proxy/squid-2.5.7-r5"
Threat Level: Medium
Click HERE for more information and discussions on this network vulnerability scan.