Detections
Analytics
Debian DSA-809-2 : squid - several vulnerabilities
medium Nessus Plugin ID 19684
Synopsis
The remote Debian host is missing a security-related update.Description
Certain aborted requests that trigger an assertion in squid, the popular WWW proxy cache, may allow remote attackers to cause a denial of service. This update also fixes a regression caused by DSA 751.For completeness below is the original advisory text :
Several vulnerabilities have been discovered in Squid, the popular WWW proxy cache. The Common Vulnerabilities and Exposures project identifies the following problems :
- CAN-2005-2794 Certain aborted requests that trigger an assert may allow remote attackers to cause a denial of service.
- CAN-2005-2796
Specially crafted requests can cause a denial of service.
Solution
Upgrade the squid package.For the oldstable distribution (woody) this problem has been fixed in version 2.4.6-2woody10.
For the stable distribution (sarge) these problems have been fixed in version 2.5.9-10sarge1.
See Also
Plugin Details
Severity: Medium
ID: 19684
File Name: debian_DSA-809.nasl
Version: 1.22
Type: local
Agent: unix
Family: Debian Local Security Checks
Published: 9/13/2005
Updated: 1/4/2021
Supported Sensors: Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3.6
CVSS v2
Risk Factor: Medium
Base Score: 5
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P
Vulnerability Information
CPE: p-cpe:/a:debian:debian_linux:squid, cpe:/o:debian:debian_linux:3.0, cpe:/o:debian:debian_linux:3.1
Required KB Items: Host/local_checks_enabled, Host/Debian/release, Host/Debian/dpkg-l
Vulnerability Publication Date: 9/1/2005
Reference Information
CVE: CVE-2005-2794, CVE-2005-2796
DSA: 809