Family: Red Hat Local Security Checks --> Category: infos
RHSA-2004-462: squid Vulnerability Scan
Vulnerability Scan Summary
Check for the version of the squid packages
Detailed Explanation for this Vulnerability Test
An updated squid package that fixes a security vulnerability in the NTLM
authentication helper is now available.
Squid is a full-featured Web proxy cache.
An out of bounds memory read bug was found within the NTLM authentication
helper routine. If Squid is configured to use the NTLM authentication
helper, a remote attacker could send a carefully crafted NTLM
authentication packet and cause Squid to crash. The Common Vulnerabilities
and Exposures project (cve.mitre.org) has assigned the name CVE-2004-0832
to this issue.
Note: The NTLM authentication helper is not enabled by default in Red Hat
Enterprise Linux 3. Red Hat Enterprise Linux 2.1 is not vulnerable to this
issue as it shipped with a version of Squid which did not contain the
Users of Squid should update to this erratum package, which contains a
backported patch and is not vulnerable to this issue.
Solution : http://rhn.redhat.com/errata/RHSA-2004-462.html
Threat Level: High
Click HERE for more information and discussions on this network vulnerability scan.