|
|
Family: Gentoo Local Security Checks --> Category: infos
[GLSA-200409-04] Squid: Denial of service when using NTLM authentication Vulnerability Scan
Vulnerability Scan Summary
Squid: Denial of service when using NTLM authentication
Detailed Explanation for this Vulnerability Test
The remote host is affected by the vulnerability described in GLSA-200409-04
(Squid: Denial of service when using NTLM authentication)
Squid 2.5.x versions contain a bug in the functions ntlm_fetch_string() and
ntlm_get_string() which lack checking the int32_t offset "o" for
negative values.
Impact
A remote attacker could cause a denial of service situation by sending
certain malformed NTLMSSP packets if NTLM authentication is enabled.
Workaround
Disable NTLM authentication by removing any "auth_param ntlm program
..." directives from squid.conf or use ntlm_auth from Samba-3.x.
References:
http://www1.uk.squid-cache.org/squid/Versions/v2/2.5/bugs/#squid-2.5.STABLE6-ntlm_fetch_string
Solution:
All Squid users should upgrade to the latest stable version:
# emerge sync
# emerge -pv ">=net-www/squid-2.5.6-r2"
# emerge ">=net-www/squid-2.5.6-r2"
Threat Level: Medium
Click HERE for more information and discussions on this network vulnerability scan.
|
