Test ID:	1.3.6.1.4.1.25623.1.0.51244
Category:	Red Hat Local Security Checks
Title:	RedHat Security Advisory RHSA-2002:130
Summary:	NOSUMMARY
Description:	Description: The remote host is missing updates announced in advisory RHSA-2002:130. New Squid packages are available which fix various issues. Squid is a high-performance proxy caching server. The following script_summary( describes the various issues found and fixed: Several buffer overflows have been found in the MSTN auth helper (msnt_auth) when configured to use denyusers or allowusers access control files. Several buffer overflows were found in the gopher client of Squid. It could be possible for a malicious gopher server to cause Squid to crash. A problem was found in the handling of the FTP data channel, possibly allowing abuse of the FTP proxy to bypass firewall rules or inject false FTP replies. Several possible buffer overflows were found in the code parsing FTP directories, which potentially allow for an untrusted FTP server to crash Squid. Thanks go to Olaf Kirch and the Squid team for notifying us of the problems and to the Squid team for providing patches. All users of Squid are advised to upgrade to these errata packages which contain patches to correct each of these issues. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2002-130.html http://www.squid-cache.org/Versions/v2/2.4/bugs/ Risk factor : High CVSS Score: 7.5
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2002-0713 BugTraq ID: 5155 http://www.securityfocus.com/bid/5155 BugTraq ID: 5156 http://www.securityfocus.com/bid/5156 BugTraq ID: 5157 http://www.securityfocus.com/bid/5157 Bugtraq: 20020715 TSLSA-2002-0062 - squid (Google Search) http://marc.info/?l=bugtraq&m=102674543407606&w=2 Caldera Security Advisory: CSSA-2002-046.0 ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-046.0.txt Conectiva Linux advisory: CLA-2002:506 http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-044.php RedHat Security Advisories: RHSA-2002:051 http://rhn.redhat.com/errata/RHSA-2002-051.html RedHat Security Advisories: RHSA-2002:130 http://rhn.redhat.com/errata/RHSA-2002-130.html SuSE Security Announcement: SuSE-SA:2002:025 (Google Search) http://www.iss.net/security_center/static/9481.php http://www.iss.net/security_center/static/9480.php http://www.iss.net/security_center/static/9482.php Common Vulnerability Exposure (CVE) ID: CVE-2002-0715 BugTraq ID: 5154 http://www.securityfocus.com/bid/5154 http://www.iss.net/security_center/static/9478.php Common Vulnerability Exposure (CVE) ID: CVE-2002-0714 BugTraq ID: 5158 http://www.securityfocus.com/bid/5158 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000506 http://www.osvdb.org/5924 http://www.iss.net/security_center/static/9479.php
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.