|
|
Family: Ubuntu Local Security Checks --> Category: infos
USN77-1 : squid vulnerabilities Vulnerability Scan
Vulnerability Scan Summary
squid vulnerabilities
Detailed Explanation for this Vulnerability Test
Synopsis :
These remote packages are missing security patches :
- squid
- squid-cgi
- squid-common
- squidclient
Description :
A possible authentication bypass was discovered in the LDAP
authentication backend. LDAP ignores leading and trailing whitespace
in search filters. This could possibly be abused to bypass explicit
access controls or confuse accounting when using several variants of
the login name. (CVE-2005-0173)
Previous Squid versions were not strict enough while parsing HTTP
requests and responses. Various violations of the HTTP protocol, such
as multiple Content-Length header lines, invalid "Carriage Return"
characters, and HTTP header names containing whitespace, led to cache
pollution and could possibly be exploited to deliver wrong content to
clients. (CVE-2005-0174)
Squid was susceptible to a cache poisoning attack called "HTTP
response splitting", where false replies are injected in the HTTP
stream. This allowed malicious web servers to forge wrong cache
content for arbitrary web sites, which was then delivered to Squid
clients. (CVE-2005-0175)
The FSC Vulnerability Research Team discovered a buffer overflow in
t
[...]
Solution :
Upgrade to :
- squid-2.5.5-6ubuntu0.4 (Ubuntu 4.10)
- squid-cgi-2.5.5-6ubuntu0.4 (Ubuntu 4.10)
- squid-common-2.5.5-6ubuntu0.4 (Ubuntu 4.10)
- squidclient-2.5.5-6ubuntu0.4 (Ubuntu 4.10)
Threat Level: High
Click HERE for more information and discussions on this network vulnerability scan.
|
