|
|
Family: Red Hat Local Security Checks --> Category: infos
RHSA-2004-242: squid Vulnerability Scan
Vulnerability Scan Summary
Check for the version of the squid packages
Detailed Explanation for this Vulnerability Test
An updated squid package that fixes a security vulnerability in
the NTLM authentication helper is now available.
Squid is a full-featured Web proxy cache.
A buffer overflow was found within the NTLM authentication helper
routine. If Squid is configured to use the NTLM authentication helper,
a remote attacker could potentially execute arbitrary code by sending a
lengthy password. The Common Vulnerabilities and Exposures project
(cve.mitre.org) has assigned the name CVE-2004-0541 to this issue.
Note: The NTLM authentication helper is not enabled by default in Red Hat
Enterprise Linux 3. Red Hat Enterprise Linux 2.1 is not vulnerable to this
issue as it shipped with a version of Squid which did not contain the
helper.
Users of Squid should update to this errata package which contains a
backported patch that is not vulnerable to this issue.
Solution : http://rhn.redhat.com/errata/RHSA-2004-242.html
Threat Level: High
Click HERE for more information and discussions on this network vulnerability scan.
|
