Paketname
squid
Datum
2005-02-10
Advisory ID
MDKSA-2005:034
Betroffene Versionen
9.2 i586 , CS2.1 x86_64 , 10.0 amd64 , 10.1 i586 , 10.0 i586 , CS3.0 x86_64 , CS3.0 i586 , 9.2 amd64 , CS2.1 i586 , 10.1 x86_64

Problembeschreibung

More vulnerabilities were discovered in the squid server: The LDAP handling of search filters was inadequate which could be abused to allow logins using severial variants of a single login name, possibly bypassing explicit access controls (CAN-2005-0173). Minor problems in the HTTP header parsing code that could be used for cache poisoning (CAN-2005-0174 and CAN-2005-0175). A buffer overflow in the WCCP handling code allowed remote attackers to cause a Denial of Service and could potentially allow for the execution of arbitrary code by using a long WCCP packet. The updated packages have been patched to prevent these problems.

Aktualisierte Pakete

9.2 i586

 c421d3df715cefb0a97995269f16e931  9.2/RPMS/squid-2.5.STABLE3-3.6.92mdk.i586.rpm
1fd8fdf79dbd6f647d00bea37be5400b  9.2/SRPMS/squid-2.5.STABLE3-3.6.92mdk.src.rpm

CS2.1 x86_64

 4cd111cf43876cc401eccfc49b48148c  x86_64/corporate/2.1/RPMS/squid-2.4.STABLE7-2.4.C21mdk.x86_64.rpm
d706be0b04a5ac2e5b28b5b151181bda  x86_64/corporate/2.1/SRPMS/squid-2.4.STABLE7-2.4.C21mdk.src.rpm

10.0 amd64

 432ea3eabd02f1f3b18919b23a3f19fe  amd64/10.0/RPMS/squid-2.5.STABLE4-2.4.100mdk.amd64.rpm
d856951204f2d02932e7bb413bb31bfa  amd64/10.0/SRPMS/squid-2.5.STABLE4-2.4.100mdk.src.rpm

10.1 i586

 a5bf0588457cd842d2326f647ebcbc25  10.1/RPMS/squid-2.5.STABLE6-2.3.101mdk.i586.rpm
b726f35ab93d4a12576a7923e374e5bf  10.1/SRPMS/squid-2.5.STABLE6-2.3.101mdk.src.rpm

10.0 i586

 656b659ee9ba2c1a08e24d1187a2c29f  10.0/RPMS/squid-2.5.STABLE4-2.4.100mdk.i586.rpm
d856951204f2d02932e7bb413bb31bfa  10.0/SRPMS/squid-2.5.STABLE4-2.4.100mdk.src.rpm

CS3.0 x86_64

 13a4a4ac0b02deb4366482e3f2317b22  x86_64/corporate/3.0/RPMS/squid-2.5.STABLE4-2.4.C30mdk.x86_64.rpm
8fd70e360e772d30e8668000a6954a1d  x86_64/corporate/3.0/SRPMS/squid-2.5.STABLE4-2.4.C30mdk.src.rpm

CS3.0 i586

 be661ea6526f37cf0efdb097319a2a46  corporate/3.0/RPMS/squid-2.5.STABLE4-2.4.C30mdk.i586.rpm
8fd70e360e772d30e8668000a6954a1d  corporate/3.0/SRPMS/squid-2.5.STABLE4-2.4.C30mdk.src.rpm

9.2 amd64

 21d4c2e94050161a6192e63304852ec7  amd64/9.2/RPMS/squid-2.5.STABLE3-3.6.92mdk.amd64.rpm
1fd8fdf79dbd6f647d00bea37be5400b  amd64/9.2/SRPMS/squid-2.5.STABLE3-3.6.92mdk.src.rpm

CS2.1 i586

 50c44984c30f4c8e0db630da66411c70  corporate/2.1/RPMS/squid-2.4.STABLE7-2.4.C21mdk.i586.rpm
d706be0b04a5ac2e5b28b5b151181bda  corporate/2.1/SRPMS/squid-2.4.STABLE7-2.4.C21mdk.src.rpm

10.1 x86_64

 96e84ddeb61f432b7358344da7608f25  x86_64/10.1/RPMS/squid-2.5.STABLE6-2.3.101mdk.x86_64.rpm
b726f35ab93d4a12576a7923e374e5bf  x86_64/10.1/SRPMS/squid-2.5.STABLE6-2.3.101mdk.src.rpm

Referenzen