Vulnerability Assessment & Network Security Forums



If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important.  If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery.


Home >> Browse Vulnerability Assessment Database >> Mandrake Local Security Checks >> MDKSA-2002:016-1: squid


Vulnerability Assessment Details

MDKSA-2002:016-1: squid

Vulnerability Assessment Summary
Check for the version of the squid package

Detailed Explanation for this Vulnerability Assessment

The remote host is missing the patch for the advisory MDKSA-2002:016-1 (squid).


Three security issues were found in the 2.x versions of the Squid proxy server
up to and including 2.4.STABLE3. The first is a memory leak in the optional SNMP
interface to Squid which could permit a malicious user who can send packets to
the Squid SNMP port to possibly perform a Denial of Service attack on ther
server if the SNMP interface is enabled. The next is a buffer overflow in the
implementation of ftp:// URLs where permited users could possibly perform a DoS
on the server, and may be able to trigger remote execution of code (which the
authors have not yet confirmed). The final issue is with the HTCP interface
which cannot be properly disabled from squid.conf
HTCP is enabled by default on
Mandrake Linux systems.
Update:
The squid updates for all versions other than Mandrake Linux were incorrectly
built with LDAP authentication which introduced a dependency on OpenLDAP. These
new packages do not use LDAP authentication. The Single Network Firewall 7.2
package previously released did not use LDAP authentication, however rebuilding
the source RPM package required LDAP to be installed. Single Network Firewall
7.2 users do not need to upgrade to these packages to have a properly function
squid.


Solution : http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2002:016-1
Network Security Threat Level: High

Networks Security ID:

Vulnerability Assessment Copyright: This script is Copyright (C) 2004 Tenable Network Security

Cables, Connectors

samsung note tablet 8.0
$75.0
samsung note tablet 8.0 pictureGalaxy TabPro S SM-W700NZDBXAR 12in 256GB SSD Tablet (Gold)
$906.52
Galaxy TabPro S SM-W700NZDBXAR 12in 256GB SSD Tablet (Gold) pictureJEAN STYLE Book-Case/Cover/Pouch for Samsung SM-T817AZKAATT Galaxy Tab S2 9.7
$19.82
JEAN STYLE Book-Case/Cover/Pouch for Samsung SM-T817AZKAATT Galaxy Tab S2 9.7 pictureGenuine Original Samsung SM-P6000ZWYXAR Galaxy Note 10.1 2014 S PEN/Stylus/SPEN
$18.66
Genuine Original Samsung SM-P6000ZWYXAR Galaxy Note 10.1 2014 S PEN/Stylus/SPEN picture


Discussions

No Discussions have been posted on this vulnerability.