Nessus Plugin #16441

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

[GLSA-200502-04] Squid: Multiple vulnerabilities

Family:

Gentoo Local Security Checks

Category:

infos

Copyright:

(C) 2005 Michel Arboi

Summary:

Squid: Multiple vulnerabilities

Version:

$Revision: 1.1 $

Cve_id:

CAN-2005-0173, CAN-2005-0174, CAN-2005-0175, CAN-2005-0211

Bugtraq_id:

-

Xrefs:

GLSA:200502-04

Description:

The remote host is affected by the vulnerability described in GLSA-200502-04
(Squid: Multiple vulnerabilities)


Squid contains several vulnerabilities:
Buffer overflow when handling WCCP recvfrom()
(CAN-2005-0211).
Loose checking of HTTP headers (CAN-2005-0173 and
CAN-2005-0174).
Incorrect handling of LDAP login names with spaces
(CAN-2005-0175).

Impact

An attacker could exploit:
the WCCP buffer overflow to cause Denial of Service.
the HTTP header parsing vulnerabilities to inject arbitrary
response data, potentially leading to content spoofing, web cache
poisoning and other cross-site scripting or HTTP response splitting
attacks.
the LDAP issue to login with several variations of the same login
name, leading to log poisoning.

Workaround

There is no known workaround at this time.

References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0173
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0174
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0175
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0211


Solution:
All Squid users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=www-proxy/squid-2.5.7-r5"


Risk factor : Medium