Description
Buffer overflows in Squid before 2.4.STABLE6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code (1) via the MSNT auth helper (msnt_auth) when using denyusers or allowusers files, (2) via the gopher client, or (3) via the FTP server directory listing parser when HTML output is generated.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | squid | 2.4.6-2 | — |
| Debian 13 | squid | 2.4.6-2 | — |
| Debian 12 | squid | 2.4.6-2 | — |
References
- squid-ftp-dir-bo(9481) vdb-entry
- 20020715 TSLSA-2002-0062 - squid mailing-list
- squid-gopher-bo(9480) vdb-entry
- 5157 vdb-entry
- squid-msnt-helper-bo(9482) vdb-entry
- http://www.squid-cache.org/Versions/v2/2.4/bugs/
- RHSA-2002:051 vendor-advisory
- 5155 vdb-entry
- 5156 vdb-entry
- http://www.squid-cache.org/Advisories/SQUID-2002_3.txt
- RHSA-2002:130 vendor-advisory
- MDKSA-2002:044 vendor-advisory