Test Kennung:	1.3.6.1.4.1.25623.1.0.142634
Kategorie:	Web Servers
Titel:	Squid Security Update Advisory (SQUID-2019:6)
Zusammenfassung:	Squid is prone to multiple cross-site scripting vulnerabilities due to; incorrect input handling in the cachemgr.cgi tool.
Beschreibung:	Summary: Squid is prone to multiple cross-site scripting vulnerabilities due to incorrect input handling in the cachemgr.cgi tool. Vulnerability Insight: This allows a malicious server to embed URLs in its content such that user credentials and other information can be extracted from a client or administrator with access to the Squid cachemgr.cgi tool URL. Affected Software/OS: Squid proxy versions 2.x, 3.x through 3.5.28 and 4.x through 4.7. Solution: Update to version 4.8 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2019-13345 BugTraq ID: 109095 http://www.securityfocus.com/bid/109095 Bugtraq: 20190825 [SECURITY] [DSA 4507-1] squid security update (Google Search) https://seclists.org/bugtraq/2019/Aug/42 Debian Security Information: DSA-4507 (Google Search) https://www.debian.org/security/2019/dsa-4507 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X2ERPHSPUGOYVVRPQRASQBFGS2EJISFC/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SPXN2CLAGN5QSQBTOV5IGVLDOQSRFNTZ/ https://bugs.squid-cache.org/show_bug.cgi?id=4957 https://github.com/squid-cache/squid/pull/429 https://lists.debian.org/debian-lts-announce/2019/07/msg00006.html https://lists.debian.org/debian-lts-announce/2020/07/msg00009.html RedHat Security Advisories: RHSA-2019:3476 https://access.redhat.com/errata/RHSA-2019:3476 SuSE Security Announcement: openSUSE-SU-2019:1963 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00067.html SuSE Security Announcement: openSUSE-SU-2019:2540 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00053.html SuSE Security Announcement: openSUSE-SU-2019:2541 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00056.html https://usn.ubuntu.com/4059-1/ https://usn.ubuntu.com/4059-2/
Copyright	Copyright (C) 2019 Greenbone Networks GmbH

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.