The string-comparison functions in String.cci in Squid 3.x before 3.1.8 and 3.2.x before 3.2.0.2 allow remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request.

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2011-0545 advisory.

  - The string-comparison functions in String.cci in Squid 3.x before 3.1.8 and 3.2.x before 3.2.0.2 allow     remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted     request. (CVE-2010-3072)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

A remote trusted client can cause a NULL pointer dereference within squid to make it crash. (CVE-2010-3072: CVSS v2 Base Score: 5.0)

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

It was found that string comparison functions in Squid did not properly handle the comparisons of NULL and empty strings. A remote, trusted web client could use this flaw to cause the squid daemon to crash via a specially crafted request. (CVE-2010-3072)

This update also fixes the following bugs :

  - A small memory leak in Squid caused multiple 'ctx: enter     level' messages to be logged to     '/var/log/squid/cache.log'. This update resolves the     memory leak. (BZ#666533)

  - This erratum upgrades Squid to upstream version 3.1.10.
    This upgraded version supports the Google Instant     service and introduces various code improvements.
    (BZ#639365)

Users of squid should upgrade to this updated package, which resolves these issues. After installing this update, the squid service will be restarted automatically.

The remote host is affected by the vulnerability described in GLSA-201110-24 (Squid: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Squid. Please review       the CVE identifiers referenced below for details.
  Impact :

    Remote unauthenticated attackers may be able to execute arbitrary code       with the privileges of the Squid process or cause a Denial of Service.
  Workaround :

    There is no known workaround at this time.

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2011:0545 advisory.

    Squid is a high-performance proxy caching server for web clients,     supporting FTP, Gopher, and HTTP data objects.

    It was found that string comparison functions in Squid did not properly     handle the comparisons of NULL and empty strings. A remote, trusted web     client could use this flaw to cause the squid daemon to crash via a     specially-crafted request. (CVE-2010-3072)

    This update also fixes the following bugs:

    * A small memory leak in Squid caused multiple ctx: enter level messages     to be logged to /var/log/squid/cache.log. This update resolves the memory     leak. (BZ#666533)

    * This erratum upgrades Squid to upstream version 3.1.10. This upgraded     version supports the Google Instant service and introduces various code     improvements. (BZ#639365)

    Users of squid should upgrade to this updated package, which resolves these     issues. After installing this update, the squid service will be restarted     automatically.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to its banner, the version of Squid is 3.x earlier than than 3.1.8, or 3.2.x earlier than 3.2.0.2. Such versions are potentially affected by a denial of service vulnerability caused by an internal error in string handling. A remote attacker, exploiting this flaw, could crash the affected service.

Note that Nessus has relied only on the version in the proxy server's banner, which is not updated by either of the patches the project has released to address the issue. If one of those has been applied properly and the service restarted, consider this to be a false positive.

Squid security advisory 2010:3 reports :

Due to an internal error in string handling Squid is vulnerable to a denial of service attack when processing specially crafted requests.

This problem allows any trusted client to perform a denial of service attack on the Squid service.

A vulnerability has been found and corrected in squid :

The string-comparison functions in String.cci in Squid 3.x before 3.1.8 and 3.2.x before 3.2.0.2 allow remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request (CVE-2010-3072).

Packages for 2008.0 and 2009.0 are provided as of the Extended Maintenance Program. Please visit this link to learn more:
http://store.mandriva.com/product_info.php?cPath=149&amp;products_id=4 90

The updated packages have been patched to correct this issue.

Phil Oester discovered that Squid-3, a fully featured Web Proxy cache, is prone to a denial of service attack via a specially crafted request that includes empty strings.

- Upstream 3.1.8 bugfix release fixing SQUID-2010:3 denial     of service issue. * Drop -fPIE compiler flag which     resulted in inconsistent build and SELinux complaints.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is running Squid, a web proxy application.
Versions of Squid earlier than 3.1.8 / 3.2.0.2 are potentially affected by a denial of service vulnerability caused by an internal error in its string handling.  A remote attacker, exploiting this flaw, could crash the affected service.

The remote host is running Squid, a web proxy application.

Versions of Squid earlier than 3.1.8 / 3.2.0.2 are potentially affected by a denial of service vulnerability caused by an internal error in its string handling.  A remote attacker, exploiting this flaw, could crash the affected service.

ID	Name	Product	Family	Severity
181099	Oracle Linux 6 : squid (ELSA-2011-0545)	Nessus	Oracle Linux Local Security Checks	high
75746	openSUSE Security Update : squid3 (openSUSE-SU-2010:0727-1)	Nessus	SuSE Local Security Checks	medium
61048	Scientific Linux Security Update : squid on SL6.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	medium
56658	GLSA-201110-24 : Squid: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	medium
54591	RHEL 6 : squid (RHSA-2011:0545)	Nessus	Red Hat Local Security Checks	high
50020	openSUSE Security Update : squid3 (openSUSE-SU-2010:0727-1)	Nessus	SuSE Local Security Checks	medium
50014	openSUSE Security Update : squid3 (openSUSE-SU-2010:0727-1)	Nessus	SuSE Local Security Checks	medium
49693	Squid < 3.1.8 / 3.2.0.2 NULL Pointer Dereference Denial of Service	Nessus	Firewalls	medium
49687	FreeBSD : squid -- Denial of service vulnerability in request handling (e4dac715-c818-11df-a92c-0015587e2cc1)	Nessus	FreeBSD Local Security Checks	medium
49654	Mandriva Linux Security Advisory : squid (MDVSA-2010:187)	Nessus	Mandriva Local Security Checks	medium
49277	Debian DSA-2111-1 : squid3 - denial of service	Nessus	Debian Local Security Checks	medium
49243	Fedora 12 : squid-3.1.8-1.fc12 (2010-14236)	Nessus	Fedora Local Security Checks	medium
49242	Fedora 13 : squid-3.1.8-1.fc13 (2010-14222)	Nessus	Fedora Local Security Checks	medium
801043	Squid < 3.1.8 / 3.2.0.2 NULL Pointer Dereference Denial of Service Vulnerability	Log Correlation Engine	Web Servers	medium
5662	Squid 3.x < 3.1.8 / 3.2.x < 3.2.0.2 NULL Pointer Dereference DoS	Nessus Network Monitor	Web Servers	medium

Detections

Analytics

CVE-2010-3072

high

Tenable Plugins

high

medium

medium

medium

high

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium