A Denial of Service vulnerability was discovered in the handling of aborted requests. A remote attacker could exploit this to crash Squid by sending specially crafted requests. (CAN-2005-2794)

Alex Masterov discovered a Denial of Service vulnerability in the sslConnectTimeout() function. By sending specially crafted SSL requests, a remote attacker could exploit this to crash Squid.
(CAN-2005-2796).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Certain aborted requests that trigger an assertion in squid, the popular WWW proxy cache, may allow remote attackers to cause a denial of service.  This update also fixes a regression caused by DSA 751.
For completeness below is the original advisory text :

  Several vulnerabilities have been discovered in Squid, the popular   WWW proxy cache. The Common Vulnerabilities and Exposures project   identifies the following problems :

    - CAN-2005-2794       Certain aborted requests that trigger an assert may       allow remote attackers to cause a denial of service.

    - CAN-2005-2796

      Specially crafted requests can cause a denial of       service.

The squid patches page notes :

Squid crashes with the above assertion failure [assertion failed :
store.c:523: 'e->store_status == STORE_PENDING'] in certain conditions involving aborted requests.

Two vulnerabilities were recently discovered in squid :

The first is a DoS possible via certain aborted requests that trigger an assertion error related to 'STOP_PENDING' (CVE-2005-2794).

The second is a DoS caused by certain crafted requests and SSL timeouts (CVE-2005-2796).

The updated packages have been patched to address these issues.

The remote host is affected by the vulnerability described in GLSA-200509-06 (Squid: Denial of Service vulnerabilities)

    Certain malformed requests result in a segmentation fault in the     sslConnectTimeout function, handling of other certain requests trigger     assertion failures.
  Impact :

    By performing malformed requests an attacker could cause Squid to crash     by triggering an assertion failure or invalid memory reference.
  Workaround :

    There is no known workaround at this time.

An updated Squid package that fixes security issues is now available.

This update has been rated as having important security impact by the Red Hat Security Response Team.

Squid is a full-featured Web proxy cache.

A bug was found in the way Squid displays error messages. A remote attacker could submit a request containing an invalid hostname which would result in Squid displaying a previously used error message. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2004-2479 to this issue.

Two denial of service bugs were found in the way Squid handles malformed requests. A remote attacker could submit a specially crafted request to Squid that would cause the server to crash. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CVE-2005-2794 and CVE-2005-2796 to these issues.

Please note that CVE-2005-2796 does not affect Red Hat Enterprise Linux 2.1

Users of Squid should upgrade to this updated package that contains backported patches, and is not vulnerable to these issues.

The remote Squid caching proxy, according to its version number, is vulnerable to an attack where the attacker can cause the Squid proxy to stop servicing valid service requests.  The flaw is within the 'sslConnectTimeout' function and stems from the functions inability to parse user-supplied requests.  Successful exploitation leads to a loss of availability.  

ID	名稱	產品	系列	已發布	已更新	嚴重性
20594	Ubuntu 4.10 / 5.04 : squid vulnerabilities (USN-183-1)	Nessus	Ubuntu Local Security Checks	2006/1/15	2021/1/19	medium
19684	Debian DSA-809-2 : squid - several vulnerabilities	Nessus	Debian Local Security Checks	2005/9/13	2021/1/4	medium
21386	FreeBSD : squid -- Possible Denial Of Service Vulnerability in store.c (0c0dc409-1c5e-11da-92ce-0048543d60ce)	Nessus	FreeBSD Local Security Checks	2006/5/13	2021/1/6	medium
19917	Mandrake Linux Security Advisory : squid (MDKSA-2005:162)	Nessus	Mandriva Local Security Checks	2005/10/5	2021/1/6	medium
19671	GLSA-200509-06 : Squid: Denial of Service vulnerabilities	Nessus	Gentoo Local Security Checks	2005/9/12	2021/1/6	medium
21855	CentOS 3 / 4 : squid (CESA-2005:766)	Nessus	CentOS Local Security Checks	2006/7/3	2021/1/4	medium
19713	RHEL 2.1 / 3 / 4 : squid (RHSA-2005:766)	Nessus	Red Hat Local Security Checks	2005/9/17	2021/1/14	medium
3206	Squid < 2.5.STABLE11 sslConnectTimeout DoS	Nessus Network Monitor	Web Servers	2005/9/6	2019/3/6	high
801036	Squid sslConnectTimeout Function Remote DoS	Log Correlation Engine	Web Servers			high

偵測

搜尋 Plugin

medium

medium

medium

medium

medium

medium

medium

high

high