Family: Fedora Local Security Checks --> Category: infos
Fedora Core 2 2004-330: squid Vulnerability Scan
Vulnerability Scan Summary
Check for the version of the squid package
Detailed Explanation for this Vulnerability Test
The remote host is missing the patch for the advisory FEDORA-2004-330 (squid).
Squid is a high-performance proxy caching server for Web clients,
supporting FTP, gopher, and HTTP data objects. Unlike traditional
caching software, Squid handles all requests in a single,
non-blocking, I/O-driven process. Squid keeps meta data and especially
hot objects cached in RAM, caches DNS lookups, supports non-blocking
DNS lookups, and implements negative caching of failed requests.
Squid consists of a main server program squid, a Domain Name System
lookup program (dnsserver), a program for retrieving FTP data
(ftpget), and some management and client tools.
This update fixes a potential DoS against squid that was reported by
* Fri Oct 1 2004 Jay Fenlason 7:2.5.STABLE3-4.fc2.1
- Modify the entry for /etc/squid.conf in this spec file to set the
permissions to 640 owned by root:squid. This will protect passwords
stored in the file from prying eyes, and close #125007
- Include the -proxy-abuse patch, which closes #133970
Solution : http://www.fedoranews.org/updates/FEDORA-2004-330.shtml
Threat Level: High
Click HERE for more information and discussions on this network vulnerability scan.