Detections
Analytics
Squid 3.0.STABLE16 / 3.10.11
medium Nessus Plugin ID 40420
Language:
Synopsis
The remote proxy server is prone to denial of service attacks.Description
According to its banner, the version of the Squid proxy caching server installed on the remote host is older than 3.0.STABLE17 or 3.1.0.12.Such versions reportedly use incorrect bounds checking when processing some requests or responses.
Squid-2.x releases are not vulnerable.
Solution
Either upgrade to Squid version 3.0.STABLE17 or 3.1.0.12 or later or apply the patch referenced in the project's advisory above.See Also
http://www.squid-cache.org/Advisories/SQUID-2009_2.txt
http://www.securityfocus.com/advisories/17446
Plugin Details
Severity: Medium
ID: 40420
File Name: squid_3_0_16.nasl
Version: 1.13
Type: remote
Family: Firewalls
Published: 7/29/2009
Updated: 7/30/2018
Configuration: Enable paranoid mode
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3.6
CVSS v2
Risk Factor: Medium
Base Score: 5
Temporal Score: 3.7
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P
Vulnerability Information
CPE: cpe:/a:squid-cache:squid
Required KB Items: www/squid, Settings/ParanoidReport
Exploit Ease: No known exploits are available
Patch Publication Date: 7/27/2009
Vulnerability Publication Date: 7/27/2009
Reference Information
CVE: CVE-2009-2621, CVE-2009-2622
BID: 35812