|
|
Info |
Last Modified |
| 7 months ago |
|
|
|
|
Description |
A remote overflow exists in the Squid Web Proxy Cache. The Squid program fails to validate special characters in the username and password fields of ftp:// requests resulting in a buffer overflow. With a specially crafted request, an attacker can cause DoS or even execution of code resulting in a loss of availability in most cases.
|
|
Classification |
Location:
Remote/Network Access Required
Attack Type:
Input Manipulation
Impact:
Loss of Integrity,
Loss of Availability
Exploit:
Exploit Available
Disclosure:
OSVDB Verified
|
|
Solution |
Upgrade to version Squid-2.4.STABLE4 or higher, as it has been reported to fix this vulnerability. It is also possible to correct the flaw by implementing the following workaround(s):
The FTP issue can be worked around by denying access to non-anonymous FTP via Squid. Insert the following two lines at the top of your squid.conf:
acl non-anonymous-ftp url_regex -i ^ftp://[^/@]*@
http_access deny non-anonymous-ftp
|
|
Products |
|
Squid Web Proxy Cache
 |
2.0 |
2.1 |
2.2 |
2.3 |
2.4.STABLE3 |
|
|
|
|
|
|
Credit |
- Jouko Pynnonen - jouko
 iki.fi - Personal Page
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
