Vulnerability Scanning Solutions, LLC.
Our Process
What We Scan For
Sample Report
Client List
Contact Us
What We Scan For
Family: Ubuntu Local Security Checks --> Category: infos

USN77-1 : squid vulnerabilities Vulnerability Scan

Vulnerability Scan Summary
squid vulnerabilities

Detailed Explanation for this Vulnerability Test

Synopsis :

These remote packages are missing security patches :
- squid
- squid-cgi
- squid-common
- squidclient

Description :

A possible authentication bypass was discovered in the LDAP
authentication backend. LDAP ignores leading and trailing whitespace
in search filters. This could possibly be abused to bypass explicit
access controls or confuse accounting when using several variants of
the login name. (CVE-2005-0173)

Previous Squid versions were not strict enough while parsing HTTP
requests and responses. Various violations of the HTTP protocol, such
as multiple Content-Length header lines, invalid "Carriage Return"
characters, and HTTP header names containing whitespace, led to cache
pollution and could possibly be exploited to deliver wrong content to
clients. (CVE-2005-0174)

Squid was susceptible to a cache poisoning attack called "HTTP
response splitting", where false replies are injected in the HTTP
stream. This allowed malicious web servers to forge wrong cache
content for arbitrary web sites, which was then delivered to Squid
clients. (CVE-2005-0175)

The FSC Vulnerability Research Team discovered a buffer overflow in

Solution :

Upgrade to :
- squid-2.5.5-6ubuntu0.4 (Ubuntu 4.10)
- squid-cgi-2.5.5-6ubuntu0.4 (Ubuntu 4.10)
- squid-common-2.5.5-6ubuntu0.4 (Ubuntu 4.10)
- squidclient-2.5.5-6ubuntu0.4 (Ubuntu 4.10)

Threat Level: High

Click HERE for more information and discussions on this network vulnerability scan.


P.O. Box 827051

Pembroke Pines, FL 33082-7051

Vulnerability Scanning Solutions, LLC.