Squid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of service (core dump) and possibly execute arbitrary code with an ftp:// URL with a larger number of special characters, which exceed the buffer when Squid URL-escapes the characters.

The remote Squid caching proxy, according to its version number, is vulnerable to various buffer overflows. This could allow remote attackers to cause a denial of service (core dump) and possibly execute arbitrary code with an ftp:// URL with a larger number of special characters, which exceed the buffer when Squid URL-escapes the characters.

Three security issues were found in the 2.x versions of the Squid proxy server up to and including 2.4.STABLE3. The first is a memory leak in the optional SNMP interface to Squid which could allow a malicious user who can send packets to the Squid SNMP port to possibly perform a Denial of Service attack on ther server if the SNMP interface is enabled. The next is a buffer overflow in the implementation of ftp:// URLs where allowed users could possibly perform a DoS on the server, and may be able to trigger remote execution of code (which the authors have not yet confirmed). The final issue is with the HTCP interface which cannot be properly disabled from squid.conf; HTCP is enabled by default on Mandrake Linux systems.

Update :

The squid updates for all versions other than Mandrake Linux were incorrectly built with LDAP authentication which introduced a dependency on OpenLDAP. These new packages do not use LDAP authentication. The Single Network Firewall 7.2 package previously released did not use LDAP authentication, however rebuilding the source RPM package required LDAP to be installed. Single Network Firewall 7.2 users do not need to upgrade to these packages to have a properly function squid.

The remote squid caching proxy, according to its version number, is vulnerable to various buffer overflows.

An attacker may use these to gain a shell on this system.

ID	Name	Product	Family	Type	Severity
1523	Squid < 2.4.STABLE4 Buffer Overflow	Nessus Network Monitor	Web Servers		high
13924	Mandrake Linux Security Advisory : squid (MDKSA-2002:016-1)	Nessus	Mandriva Local Security Checks	Local	high
10923	Squid FTP URL Special Character Handling Remote Overflow	Nessus	Firewalls	Remote	high

Detections

Analytics

CVE-2002-0068

critical

Tenable Plugins

high

high

high