Test ID:	1.3.6.1.4.1.25623.1.0.840151
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-414-1)
Summary:	The remote host is missing an update for the 'squid' package(s) announced via the USN-414-1 advisory.
Description:	Summary: The remote host is missing an update for the 'squid' package(s) announced via the USN-414-1 advisory. Vulnerability Insight: David Duncan Ross Palmer and Henrik Nordstrom discovered that squid incorrectly handled special characters in FTP URLs. Remote users with access to squid could crash the server leading to a denial of service. (CVE-2007-0247) Erick Dantas Rotole and Henrik Nordstrom discovered that squid could end up in an endless loop when exhausted of available external ACL helpers. Remote users with access to squid could cause CPU starvation, possibly leading to a denial of service. This does not affect a default Ubuntu installation, since external ACL helpers must be configured and used. (CVE-2007-0248) Affected Software/OS: 'squid' package(s) on Ubuntu 6.06, Ubuntu 6.10. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-0247 BugTraq ID: 22079 http://www.securityfocus.com/bid/22079 http://fedoranews.org/cms/node/2442 http://www.gentoo.org/security/en/glsa/glsa-200701-22.xml http://www.mandriva.com/security/advisories?name=MDKSA-2007:026 http://osvdb.org/39839 http://secunia.com/advisories/23767 http://secunia.com/advisories/23805 http://secunia.com/advisories/23810 http://secunia.com/advisories/23837 http://secunia.com/advisories/23889 http://secunia.com/advisories/23921 http://secunia.com/advisories/23946 SuSE Security Announcement: SUSE-SA:2007:012 (Google Search) http://www.novell.com/linux/security/advisories/2007_12_squid.html http://www.trustix.org/errata/2007/0003/ http://www.ubuntu.com/usn/usn-414-1 http://www.vupen.com/english/advisories/2007/0199 XForce ISS Database: squid-multiple-dos(31523) https://exchange.xforce.ibmcloud.com/vulnerabilities/31523 Common Vulnerability Exposure (CVE) ID: CVE-2007-0248 BugTraq ID: 22203 http://www.securityfocus.com/bid/22203 XForce ISS Database: squid-externalacl-dos(31525) https://exchange.xforce.ibmcloud.com/vulnerabilities/31525
Copyright	Copyright (C) 2009 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.