Squid < 2.5.STABLE10 Set-Cookie Authentication Information Disclosure

Medium Nessus Network Monitor Plugin ID 2669

Synopsis

The remote proxy server may facilitate the theft of authentication data.

Description

The remote Squid caching proxy, according to its version number, is vulnerable to an attack where the attacker gains access to Set-Cookie headers for another user. Such an attack would allow the attacker to gain access to resources with the credentials of another user.

Solution

Upgrade to squid 2.5.STABLE10 or higher.

See Also

http://www.squid-cache.org/Versions/v2/2.5/bugs

http://www.nessus.org/u?4e1802e8

Plugin Details

Severity: Medium

ID: 2669

File Name: 2669.prm

Family: Web Servers

Published: 2005/04/15

Modified: 2016/11/23

Dependencies: 3389

Risk Information

Risk Factor: Medium

CVSSv2

Base Score: 6.4

Temporal Score: 5.6

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:N

Temporal Vector: CVSS2#E:ND/RL:OF/RC:C

CVSSv3

Base Score: 6.4

Temporal Score: 6.1

Vector: CVSS3#AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Temporal Vector: CVSS3#E:X/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:squid-cache:squid

Patch Publication Date: 2005/03/03

Vulnerability Publication Date: 2005/03/03

Reference Information

CVE: CVE-2005-0626, CVE-2005-0718, CVE-2005-1519

BID: 12716, 13592, 13166