|
|
Family: Debian Local Security Checks --> Category: infos
[DSA145] DSA-145-1 tinyproxy Vulnerability Scan
Vulnerability Scan Summary
DSA-145-1 tinyproxy
Detailed Explanation for this Vulnerability Test
The authors of tinyproxy, a lightweight HTTP proxy, discovered a bug
in the handling of some invalid proxy requests. Under some
circumstances, an invalid request may result in allocated memory
being freed twice. This can potentially result in the execution of
arbitrary code.
This problem has been fixed in version 1.4.3-2woody2 for the current
stable distribution (woody) and in version 1.4.3-3 for the unstable
distribution (sid). The old stable distribution (potato) is not
affected by this problem.
We recommend that you upgrade your tinyproxy package immediately.
Solution : http://www.debian.org/security/2002/dsa-145
Threat Level: High
Click HERE for more information and discussions on this network vulnerability scan.
|
