ID de Prueba:	1.3.6.1.4.1.25623.1.0.58887
Categoría:	Red Hat Local Security Checks
Título:	RedHat Security Advisory RHSA-2007:0131
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory RHSA-2007:0131. Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. A denial of service flaw was found in the way Squid processed the TRACE request method. It was possible for an attacker behind the Squid proxy to issue a malformed TRACE request, crashing the Squid daemon child process. As long as these requests were sent, it would prevent legitimate usage of the proxy server. (CVE-2007-1560) This flaw does not affect the version of Squid shipped in Red Hat Enterprise Linux 2.1, 3, or 4. Users of Squid should upgrade to this updated package, which contains a backported patch and is not vulnerable to this issue. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2007-0131.html http://www.redhat.com/security/updates/classification/#moderate Risk factor : Medium CVSS Score: 5.0
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2007-1560 1017805 http://www.securitytracker.com/id?1017805 23085 http://www.securityfocus.com/bid/23085 24611 http://secunia.com/advisories/24611 24614 http://secunia.com/advisories/24614 24625 http://secunia.com/advisories/24625 24662 http://secunia.com/advisories/24662 24911 http://secunia.com/advisories/24911 ADV-2007-1035 http://www.vupen.com/english/advisories/2007/1035 GLSA-200703-27 http://security.gentoo.org/glsa/glsa-200703-27.xml MDKSA-2007:068 http://www.mandriva.com/security/advisories?name=MDKSA-2007:068 RHSA-2007:0131 http://www.redhat.com/support/errata/RHSA-2007-0131.html SUSE-SR:2007:005 http://www.novell.com/linux/security/advisories/2007_5_sr.html USN-441-1 http://www.ubuntu.com/usn/usn-441-1 http://www.squid-cache.org/Advisories/SQUID-2007_1.txt http://www.squid-cache.org/Versions/v2/2.6/changesets/11349.patch oval:org.mitre.oval:def:10291 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10291 squid-clientprocessrequest-dos(33124) https://exchange.xforce.ibmcloud.com/vulnerabilities/33124
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.