CRLF injection vulnerability in Squid before 3.1.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted header in a response.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - squid: buffer overflow in cachemgr.cgi (CVE-2016-4051)

  - Squid, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote     endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and     probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web     page that causes a client to send HTTP requests with a modified Host header. (CVE-2009-0801)

  - Multiple memory leaks in tools/cachemgr.cc in cachemgr.cgi in Squid 2.x and 3.x before 3.1.22, 3.2.x     before 3.2.4, and 3.3.x before 3.3.0.2 allow remote attackers to cause a denial of service (memory     consumption) via (1) invalid Content-Length headers, (2) long POST requests, or (3) crafted authentication     credentials. (CVE-2012-5643)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

Squid versions prior to 3.1.1 are affected by an HTML Injection vulnerability due to improper neutralization of CRLF sequences in HTTP headers. A remote attacker can exploit this vulnerability by conducting HTTP response splitting attacks via a specially crafted header in a response.

According to its banner, the version of Squid is 0.x, 1.x, 2.x and 3.x earlier than 3.1.0.10. Such versions are potentially affected by an HTTP Header Injection vulnerability. A remote attacker, exploiting this flaw could create a CRLF condition. (CVE-2015-0881)

ID	Name	Product	Family	Severity
198537	RHEL 5 : squid (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
8698	Squid < 3.1.1 HTTP Header Injection	Nessus Network Monitor	Web Servers	low
82530	Squid < 3.1.0.10 HTTP Header Injection Vulnerability	Nessus	Firewalls	medium

Detections

Analytics

CVE-2015-0881

medium

Tenable Plugins

high

low

medium