Test ID:	1.3.6.1.4.1.25623.1.0.59098
Category:	Ubuntu Local Security Checks
Title:	Ubuntu USN-414-1 (squid)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to squid announced via advisory USN-414-1. A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS Ubuntu 6.10 This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. Details follow: David Duncan Ross Palmer and Henrik Nordstrom discovered that squid incorrectly handled special characters in FTP URLs. Remote users with access to squid could crash the server leading to a denial of service. (CVE-2007-0247) Erick Dantas Rotole and Henrik Nordstrom discovered that squid could end up in an endless loop when exhausted of available external ACL helpers. Remote users with access to squid could cause CPU starvation, possibly leading to a denial of service. This does not affect a default Ubuntu installation, since external ACL helpers must be configured and used. (CVE-2007-0248) Solution: The problem can be corrected by upgrading your system to the following package versions: Ubuntu 6.06 LTS: squid 2.5.12-4ubuntu2.2 Ubuntu 6.10: squid 2.6.1-3ubuntu1.2 In general, a standard system upgrade is sufficient to effect the necessary changes. http://www.securityspace.com/smysecure/catid.html?in=USN-414-1 Risk factor : Medium CVSS Score: 5.0
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-0247 BugTraq ID: 22079 http://www.securityfocus.com/bid/22079 http://fedoranews.org/cms/node/2442 http://www.gentoo.org/security/en/glsa/glsa-200701-22.xml http://www.mandriva.com/security/advisories?name=MDKSA-2007:026 http://osvdb.org/39839 http://secunia.com/advisories/23767 http://secunia.com/advisories/23805 http://secunia.com/advisories/23810 http://secunia.com/advisories/23837 http://secunia.com/advisories/23889 http://secunia.com/advisories/23921 http://secunia.com/advisories/23946 SuSE Security Announcement: SUSE-SA:2007:012 (Google Search) http://www.novell.com/linux/security/advisories/2007_12_squid.html http://www.trustix.org/errata/2007/0003/ http://www.ubuntu.com/usn/usn-414-1 http://www.vupen.com/english/advisories/2007/0199 XForce ISS Database: squid-multiple-dos(31523) https://exchange.xforce.ibmcloud.com/vulnerabilities/31523 Common Vulnerability Exposure (CVE) ID: CVE-2007-0248 BugTraq ID: 22203 http://www.securityfocus.com/bid/22203 XForce ISS Database: squid-externalacl-dos(31525) https://exchange.xforce.ibmcloud.com/vulnerabilities/31525
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.