SquidClamav Specially Crafted Character Parsing Remote DoS

medium Nessus Plugin ID 62031

Language:

Synopsis

The remote web server hosts a CGI script that is affected by a remote denial of service vulnerability.

Description

The version of SquidClamav installed on the remote host is affected by a remote denial of service (DoS) vulnerability because it fails to properly escape URL's in system command calls. Specially crafted URL's with characters such as %0D or %0A can cause the daemon to crash.

Solution

Update to version 5.8 / 6.7 or later.

Plugin Details

Severity: Medium

ID: 62031

File Name: squidclamav_6_7_dos.nasl

Version: 1.6

Type: remote

Family: CGI abuses

Published: 9/10/2012

Updated: 1/19/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 4.2

CVSS v2

Risk Factor: Medium

Base Score: 5

Temporal Score: 3.9

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Information

CPE: cpe:/a:darold:squidclamav

Required KB Items: www/squidclamav

Excluded KB Items: Settings/disable_cgi_scanning

Exploit Ease: No exploit is required

Exploited by Nessus: true

Patch Publication Date: 7/24/2012

Vulnerability Publication Date: 7/24/2012

Reference Information

CVE: CVE-2012-3501

BID: 54663

Detections

Analytics