Detections
Analytics
RHEL 2.1 / 3 : squid (RHSA-2004:591)
medium Nessus Plugin ID 15533
Synopsis
The remote Red Hat host is missing a security update.Description
An updated squid package that fixes a remote denial of service vulnerability is now available.Squid is a full-featured Web proxy cache.
iDEFENSE reported a flaw in the squid SNMP module. This flaw could allow an attacker who has the ability to send arbitrary packets to the SNMP port to restart the server, causing it to drop all open connections. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2004-0918 to this issue.
All users of squid should update to this erratum package, which contains a backport of the security fix for this vulnerability.
Solution
Update the affected squid package.See Also
https://access.redhat.com/security/cve/cve-2004-0918
Plugin Details
Severity: Medium
ID: 15533
File Name: redhat-RHSA-2004-591.nasl
Version: 1.32
Type: local
Agent: unix
Family: Red Hat Local Security Checks
Published: 10/21/2004
Updated: 1/14/2021
Supported Sensors: Agentless Assessment, Continuous Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3.6
CVSS v2
Risk Factor: Medium
Base Score: 5
Temporal Score: 3.7
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P
Vulnerability Information
CPE: p-cpe:/a:redhat:enterprise_linux:squid, cpe:/o:redhat:enterprise_linux:2.1, cpe:/o:redhat:enterprise_linux:3
Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu
Exploit Ease: No known exploits are available
Patch Publication Date: 10/20/2004
Vulnerability Publication Date: 1/27/2005
Reference Information
CVE: CVE-2004-0918
BID: 11385