ID de Prueba:	1.3.6.1.4.1.25623.1.0.811542
Categoría:	Buffer overflow
Título:	Squid 2.0 < 2.4 STABLE4 FTP Proxy URL Buffer Overflow Vulnerability
Resumen:	Squid is prone to a buffer overflow vulnerability.
Descripción:	Summary: Squid is prone to a buffer overflow vulnerability. Vulnerability Insight: The flaw is due to a buffer overflow error in the Squid server's FTP URL handling. Vulnerability Impact: Successful exploitation will allow remote attackers to crash the squid process or execute arbitrary code. To exploit this vulnerability, and attacker must have the ability to use the Squid cache, and additionally be able to proxy FTP requests through the server. Affected Software/OS: Squid version 2.0 through 2.4 STABLE3. Solution: Update to version 2.4 STABLE4 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2002-0068 BugTraq ID: 4148 http://www.securityfocus.com/bid/4148 Bugtraq: 20020221 Squid HTTP Proxy Security Update Advisory 2002:1 (Google Search) http://marc.info/?l=bugtraq&m=101431040422095&w=2 Bugtraq: 20020222 Squid buffer overflow (Google Search) http://marc.info/?l=bugtraq&m=101440163111826&w=2 Bugtraq: 20020222 TSLSA-2002-0031 - squid (Google Search) http://marc.info/?l=bugtraq&m=101443252627021&w=2 http://www.caldera.com/support/security/advisories/CSSA-2002-010.0.txt Caldera Security Advisory: CSSA-2002-SCO.7 http://archives.neohapsis.com/archives/linux/caldera/2002-q1/0014.html Conectiva Linux advisory: CLA-2002:464 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000464 FreeBSD Security Advisory: FreeBSD-SA-02:12 ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:12.squid.asc http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-016.php http://www.osvdb.org/5378 http://www.redhat.com/support/errata/RHSA-2002-029.html SuSE Security Announcement: SuSE-SA:2002:008 (Google Search) http://www.novell.com/linux/security/advisories/2002_008_squid_txt.html http://www.iss.net/security_center/static/8258.php
Copyright	Copyright (C) 2017 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.