Test Kennung:	1.3.6.1.4.1.25623.1.0.811542
Kategorie:	Buffer overflow
Titel:	Squid 2.0 < 2.4 STABLE4 FTP Proxy URL Buffer Overflow Vulnerability
Zusammenfassung:	Squid is prone to a buffer overflow vulnerability.
Beschreibung:	Summary: Squid is prone to a buffer overflow vulnerability. Vulnerability Insight: The flaw is due to a buffer overflow error in the Squid server's FTP URL handling. Vulnerability Impact: Successful exploitation will allow remote attackers to crash the squid process or execute arbitrary code. To exploit this vulnerability, and attacker must have the ability to use the Squid cache, and additionally be able to proxy FTP requests through the server. Affected Software/OS: Squid version 2.0 through 2.4 STABLE3. Solution: Update to version 2.4 STABLE4 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2002-0068 BugTraq ID: 4148 http://www.securityfocus.com/bid/4148 Bugtraq: 20020221 Squid HTTP Proxy Security Update Advisory 2002:1 (Google Search) http://marc.info/?l=bugtraq&m=101431040422095&w=2 Bugtraq: 20020222 Squid buffer overflow (Google Search) http://marc.info/?l=bugtraq&m=101440163111826&w=2 Bugtraq: 20020222 TSLSA-2002-0031 - squid (Google Search) http://marc.info/?l=bugtraq&m=101443252627021&w=2 http://www.caldera.com/support/security/advisories/CSSA-2002-010.0.txt Caldera Security Advisory: CSSA-2002-SCO.7 http://archives.neohapsis.com/archives/linux/caldera/2002-q1/0014.html Conectiva Linux advisory: CLA-2002:464 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000464 FreeBSD Security Advisory: FreeBSD-SA-02:12 ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:12.squid.asc http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-016.php http://www.osvdb.org/5378 http://www.redhat.com/support/errata/RHSA-2002-029.html SuSE Security Announcement: SuSE-SA:2002:008 (Google Search) http://www.novell.com/linux/security/advisories/2002_008_squid_txt.html http://www.iss.net/security_center/static/8258.php
Copyright	Copyright (C) 2017 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.