Executive Summary
| Summary | |
|---|---|
| Title | squid security update |
| Informations | |||
|---|---|---|---|
| Name | RHSA-2005:766 | First vendor Publication | 2005-09-15 |
| Vendor | RedHat | Last vendor Modification | 2005-09-15 |
| Severity (Vendor) | Important | Revision | 01 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:N/I:N/A:P) | |||
|---|---|---|---|
| Cvss Base Score | 5 | Attack Range | Network |
| Cvss Impact Score | 2.9 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Problem Description: An updated Squid package that fixes security issues is now available. This update has been rated as having important security impact by the Red Hat Security Response Team. 2. Relevant releases/architectures: Red Hat Enterprise Linux AS (Advanced Server) version 2.1 - i386, ia64 Red Hat Linux Advanced Workstation 2.1 - ia64 Red Hat Enterprise Linux ES version 2.1 - i386 Red Hat Enterprise Linux AS version 3 - i386, ia64, ppc, s390, s390x, x86_64 Red Hat Desktop version 3 - i386, x86_64 Red Hat Enterprise Linux ES version 3 - i386, ia64, x86_64 Red Hat Enterprise Linux WS version 3 - i386, ia64, x86_64 Red Hat Enterprise Linux AS version 4 - i386, ia64, ppc, s390, s390x, x86_64 Red Hat Enterprise Linux Desktop version 4 - i386, x86_64 Red Hat Enterprise Linux ES version 4 - i386, ia64, x86_64 Red Hat Enterprise Linux WS version 4 - i386, ia64, x86_64 3. Problem description: Squid is a full-featured Web proxy cache. A bug was found in the way Squid displays error messages. A remote attacker could submit a request containing an invalid hostname which would result in Squid displaying a previously used error message. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2004-2479 to this issue. Two denial of service bugs were found in the way Squid handles malformed requests. A remote attacker could submit a specially crafted request to Squid that would cause the server to crash. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CAN-2005-2794 and CAN-2005-2796 to these issues. Please note that CAN-2005-2796 does not affect Red Hat Enterprise Linux 2.1 Users of Squid should upgrade to this updated package that contains backported patches, and is not vulnerable to these issues. 4. Solution: Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/ 5. Bug IDs fixed (http://bugzilla.redhat.com/): 166520 - CAN-2004-2479 squid information disclosure issue 167413 - CAN-2005-2794 Multiple squid DoS issues (CAN-2005-2796) |
Original Source
| Url : https://rhn.redhat.com/errata/RHSA-2005-766.html |
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:10276 | |||
| Oval ID: | oval:org.mitre.oval:def:10276 | ||
| Title: | store.c in Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (crash) via certain aborted requests that trigger an assert error related to STORE_PENDING. | ||
| Description: | store.c in Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (crash) via certain aborted requests that trigger an assert error related to STORE_PENDING. | ||
| Family: | unix | Class: | vulnerability |
| Reference(s): | CVE-2005-2794 | Version: | 5 |
| Platform(s): | Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 | Product(s): | |
| Definition Synopsis: | |||
| |||
| Definition Id: oval:org.mitre.oval:def:10522 | |||
| Oval ID: | oval:org.mitre.oval:def:10522 | ||
| Title: | The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (segmentation fault) via certain crafted requests. | ||
| Description: | The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (segmentation fault) via certain crafted requests. | ||
| Family: | unix | Class: | vulnerability |
| Reference(s): | CVE-2005-2796 | Version: | 5 |
| Platform(s): | Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 | Product(s): | |
| Definition Synopsis: | |||
| |||
| Definition Id: oval:org.mitre.oval:def:9711 | |||
| Oval ID: | oval:org.mitre.oval:def:9711 | ||
| Title: | Squid Web Proxy Cache 2.5 might allow remote attackers to obtain sensitive information via URLs containing invalid hostnames that cause DNS operations to fail, which results in references to previously used error messages. | ||
| Description: | Squid Web Proxy Cache 2.5 might allow remote attackers to obtain sensitive information via URLs containing invalid hostnames that cause DNS operations to fail, which results in references to previously used error messages. | ||
| Family: | unix | Class: | vulnerability |
| Reference(s): | CVE-2004-2479 | Version: | 5 |
| Platform(s): | Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 | Product(s): | |
| Definition Synopsis: | |||
| |||
CPE : Common Platform Enumeration
OpenVAS Exploits
| Date | Description |
|---|---|
| 2009-10-10 | Name : SLES9: Security update for squid File : nvt/sles9p5014113.nasl |
| 2008-09-24 | Name : Gentoo Security Advisory GLSA 200509-06 (Squid) File : nvt/glsa_200509_06.nasl |
| 2008-09-04 | Name : FreeBSD Ports: squid File : nvt/freebsd_squid16.nasl |
| 2008-09-04 | Name : FreeBSD Ports: squid File : nvt/freebsd_squid17.nasl |
| 2008-09-04 | Name : FreeBSD Ports: squid File : nvt/freebsd_squid8.nasl |
| 2008-01-17 | Name : Debian Security Advisory DSA 809-1 (squid) File : nvt/deb_809_1.nasl |
| 2008-01-17 | Name : Debian Security Advisory DSA 809-2 (squid) File : nvt/deb_809_2.nasl |
| 2008-01-17 | Name : Debian Security Advisory DSA 809-3 (squid) File : nvt/deb_809_3.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 19237 | Squid storeBuffer() Unspecified Remote DoS |
| 19151 | Squid Unspecified Malformed Request sslConnectTimeout() DoS |
| 12282 | Squid Malformed Host Name Error Message Information Disclosure Squid contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when a sequence of failed DNS lookups causes contents of recently freed memory to be displayed as error messages, which will disclose random information resulting in a loss of confidentiality. |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2006-07-03 | Name : The remote CentOS host is missing a security update. File : centos_RHSA-2005-766.nasl - Type : ACT_GATHER_INFO |
| 2006-05-13 | Name : The remote FreeBSD host is missing a security-related update. File : freebsd_pkg_0c0dc4091c5e11da92ce0048543d60ce.nasl - Type : ACT_GATHER_INFO |
| 2006-05-13 | Name : The remote FreeBSD host is missing a security-related update. File : freebsd_pkg_4e210d721c5c11da92ce0048543d60ce.nasl - Type : ACT_GATHER_INFO |
| 2006-01-15 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-183-1.nasl - Type : ACT_GATHER_INFO |
| 2005-10-05 | Name : The remote Mandrake Linux host is missing a security update. File : mandrake_MDKSA-2005-162.nasl - Type : ACT_GATHER_INFO |
| 2005-10-05 | Name : The remote host is missing a vendor-supplied security patch File : suse_SA_2005_053.nasl - Type : ACT_GATHER_INFO |
| 2005-09-17 | Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2005-766.nasl - Type : ACT_GATHER_INFO |
| 2005-09-13 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-809.nasl - Type : ACT_GATHER_INFO |
| 2005-09-12 | Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200509-06.nasl - Type : ACT_GATHER_INFO |
| 2004-12-09 | Name : The remote proxy server is affected by an information disclosure vulnerability. File : squid_mem_disclosure.nasl - Type : ACT_GATHER_INFO |
Alert History
| Date | Informations |
|---|---|
| 2017-07-11 12:07:20 |
|
| 2016-09-14 01:03:46 |
|
| 2014-02-17 11:49:39 |
|
| 2013-07-18 13:21:06 |
|
| 2013-05-11 12:23:15 |
|
