The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:415 advisory.

  - security flaw (CVE-1999-0710, CVE-2005-0626, CVE-2005-0718, CVE-2005-1345, CVE-2005-1519)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

バナーによると、リモートのSquidキャッシングプロキシは、情報漏洩の脆弱性の影響を受けやすくなっています。リクエストされたサーバーがキャッシュ可能なコンテンツの処理方法に関して非推奨のNetscape Set-Cookie仕様を採用している場合、競合状態により、Set-Cookieヘッダーが他のユーザーに漏洩する可能性があります。

Squid 2.5, when processing the configuration file, parses empty Access Control Lists (ACLs), including proxy_auth ACLs without defined auth schemes, in a way that effectively removes arguments, which could allow remote attackers to bypass intended ACLs if the administrator ignores the parser warnings. (CVE-2005-0194)

Race condition in Squid 2.5.STABLE7 to 2.5.STABLE9, when using the Netscape Set-Cookie recommendations for handling cookies in caches, may cause Set-Cookie headers to be sent to other users, which allows attackers to steal the related cookies. (CVE-2005-0626)

Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (segmentation fault) by aborting the connection during a (1) PUT or (2) POST request, which causes Squid to access previosuly freed memory. (CVE-2005-0718)

A bug in the way Squid processes errors in the access control list was also found. It is possible that an error in the access control list could give users more access than intended. (CVE-2005-1345)

In addition, due to subtle bugs in the previous backported updates of squid (Bugzilla #14209), all the squid-2.5 versions have been updated to squid-2.5.STABLE9 with all the STABLE9 patches from the squid developers.

The updated packages are patched to fix these problems.

An updated squid package that fixes several security issues is now available.

This update has been rated as having low security impact by the Red Hat Security Response Team.

Squid is a full-featured Web proxy cache.

A race condition bug was found in the way Squid handles the now obsolete Set-Cookie header. It is possible that Squid can leak Set-Cookie header information to other clients connecting to Squid.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2005-0626 to this issue. Please note that this issue only affected Red Hat Enterprise Linux 4.

A bug was found in the way Squid handles PUT and POST requests. It is possible for an authorised remote user to cause a failed PUT or POST request which can cause Squid to crash. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2005-0718 to this issue.

A bug was found in the way Squid processes errors in the access control list. It is possible that an error in the access control list could give users more access than intended. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2005-1345 to this issue.

A bug was found in the way Squid handles access to the cachemgr.cgi script. It is possible for an authorised remote user to bypass access control lists with this flaw. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-1999-0710 to this issue.

A bug was found in the way Squid handles DNS replies. If the port Squid uses for DNS requests is not protected by a firewall it is possible for a remote attacker to spoof DNS replies, possibly redirecting a user to spoofed or malicious content. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2005-1519 to this issue.

Additionally this update fixes the following bugs: - LDAP Authentication fails with an assertion error when using Red Hat Enterprise Linux 4

Users of Squid should upgrade to this updated package, which contains backported patches to correct these issues.

The remote Squid caching proxy, according to its banner, is prone to an information disclosure vulnerability. Due to a race condition, Set-Cookie headers may leak to other users if the requested server employs the deprecated Netscape Set-Cookie specifications with regards to how cacheable content is handled.

A race condition was discovered in the handling of 'Set-Cookie' headers. If the obsolete Netscape recommendation was used for handling cookies in the cache, it was possible for an attacker to steal the cookies of other users.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

根据其标题，远程 Squid 缓存代理容易受到一个信息泄露漏洞的影响。由于争用条件，如果请求的服务器采用已弃用的 Netscape Set-Cookie 规范处理可缓存内容，则 Set-Cookie 标头可能会泄露给其他用户。

根據標題來判斷，遠端 Squid 快取 Proxy 容易受到資訊洩漏弱點影響。由於存在爭用情形，如果要求的伺服器採用已過時的 Netscape Set-Cookie 規範處理可快取的內容，則 Set-Cookie 標頭可能會洩漏給其他使用者。

The remote Squid caching proxy, according to its version number, is vulnerable to an attack where the attacker gains access to Set-Cookie headers for another user.  Such an attack would allow the attacker to gain access to resources with the credentials of another user.  

The remote Squid caching proxy, according to its version number,
is vulnerable to an attack where the attacker gains access to Set-Cookie headers for another user.  Such an attack would allow the attacker to gain access to resources with the credentials of another user.

ID	名稱	產品	系列	已發布	已更新	嚴重性
18500	RHEL 4 : squid (RHSA-2005:415)	Nessus	Red Hat Local Security Checks	2005/6/16	2024/4/27	high
19237	Squid Set-Cookieヘッダーのクロスセッション情報漏洩	Nessus	Firewalls	2005/7/20	2018/7/30	medium
18171	Mandrake Linux Security Advisory : squid (MDKSA-2005:078)	Nessus	Mandriva Local Security Checks	2005/5/2	2021/1/6	critical
21822	CentOS 3 / 4 : squid (CESA-2005:415)	Nessus	CentOS Local Security Checks	2006/7/3	2021/1/4	high
19237	Squid Set-Cookie Header Cross-session Information Disclosure	Nessus	Firewalls	2005/7/20	2018/7/30	medium
20719	Ubuntu 4.10 : squid vulnerability (USN-93-1)	Nessus	Ubuntu Local Security Checks	2006/1/15	2021/1/19	low
19237	Squid Set-Cookie 标头跨会话信息泄露	Nessus	Firewalls	2005/7/20	2018/7/30	medium
19237	Squid Set-Cookie 標頭跨工作階段資訊洩漏	Nessus	Firewalls	2005/7/20	2018/7/30	medium
2669	Squid < 2.5.STABLE10 Set-Cookie Authentication Information Disclosure	Nessus Network Monitor	Web Servers	2005/4/15	2019/3/6	medium
801035	Squid < 2.5.STABLE10 Set-Cookie Authentication Information Disclosure	Log Correlation Engine	Web Servers			low

偵測

搜尋 Plugin

high

medium

critical

high

medium

low

medium

medium

medium

low