Package name
Advisory ID
Affected versions
8.1 i586 , SNF7.2 i586 , CS1.0 i586 , 8.1 i586 , 8.0 i586 , 8.0 i586 , 7.1 i586 , 7.2 i586

Problem description

Three security issues were found in the 2.x versions of the Squid proxy server up to and including 2.4.STABLE3. The first is a memory leak in the optional SNMP interface to Squid which could allow a malicious user who can send packets to the Squid SNMP port to possibly perform a Denial of Service attack on ther server if the SNMP interface is enabled. The next is a buffer overflow in the implementation of ftp:// URLs where allowed users could possibly perform a DoS on the server, and may be able to trigger remote execution of code (which the authors have not yet confirmed). The final issue is with the HTCP interface which cannot be properly disabled from squid.conf; HTCP is enabled by default on Mandrake Linux systems.

Updated packages

8.1 i586

 33b15c28c8437c979cd2a2f7c9822ec2  ia64/8.1/RPMS/squid-2.4.STABLE4-1.1mdk.ia64.rpm
4c0f0348686569ff02135144843446c4  ia64/8.1/SRPMS/squid-2.4.STABLE4-1.1mdk.src.rpm

SNF7.2 i586

 171b3a7ab30d6a8d59cffb77169fe8a5  snf7.2/RPMS/squid-2.4.STABLE4-1.4mdk.i586.rpm
5fcb0ab989bb951682b417b8df6f24be  snf7.2/SRPMS/squid-2.4.STABLE4-1.4mdk.src.rpm

CS1.0 i586

 49845545fb8c7030e93a10a83140a95d  1.0.1/RPMS/squid-2.4.STABLE4-1.2mdk.i586.rpm
48d265d7e5422a4a5c10a52e3dc0f1f6  1.0.1/SRPMS/squid-2.4.STABLE4-1.2mdk.src.rpm

8.1 i586

 b2e0af43c831b5c6aa5df12dd28c3a75  8.1/RPMS/squid-2.4.STABLE4-1.1mdk.i586.rpm
4c0f0348686569ff02135144843446c4  8.1/SRPMS/squid-2.4.STABLE4-1.1mdk.src.rpm

8.0 i586

 4516b0211e4c467da7dedb7a50f33019  8.0/RPMS/squid-2.4.STABLE4-1.3mdk.i586.rpm
5abe989099da57d849e3261c1c6d7e2b  8.0/SRPMS/squid-2.4.STABLE4-1.3mdk.src.rpm

8.0 i586

 2374d373bee20ea19379eb83ca367890  ppc/8.0/RPMS/squid-2.4.STABLE4-1.3mdk.ppc.rpm
5abe989099da57d849e3261c1c6d7e2b  ppc/8.0/SRPMS/squid-2.4.STABLE4-1.3mdk.src.rpm

7.1 i586

 49845545fb8c7030e93a10a83140a95d  7.1/RPMS/squid-2.4.STABLE4-1.2mdk.i586.rpm
48d265d7e5422a4a5c10a52e3dc0f1f6  7.1/SRPMS/squid-2.4.STABLE4-1.2mdk.src.rpm

7.2 i586

 dfdc2114fd9690237b6b3bcd27613c1c  7.2/RPMS/squid-2.4.STABLE4-1.2mdk.i586.rpm
48d265d7e5422a4a5c10a52e3dc0f1f6  7.2/SRPMS/squid-2.4.STABLE4-1.2mdk.src.rpm