Boletines de Vulnerabilidades |
Desbordamiento de búfer en Squid Web Proxy Cache |
|
Clasificación de la vulnerabilidad |
|
| Propiedad | Valor |
| Nivel de Confianza | Oficial |
| Impacto | Obtener acceso |
| Dificultad | Avanzado |
| Requerimientos del atacante | Acceso remoto sin cuenta a un servicio estandar |
Información sobre el sistema |
|
| Propiedad | Valor |
| Fabricant afectat | GNU/Linux |
| Software afectado |
Squid-Proxy 2.5.*-STABLE Squid-Proxy 3.*-PRE |
Descripción |
|
|
Se ha descubierto una vulnerabilidad de desbordamiento de búfer en Squid Web Proxy Cache. La vulnerabilidad reside en la implementación de la autenticación NTLM, concretamente en la función ntlm_check_auth(). La explotación de esta vulnerabilidad podría permitir a un atacante remoto la ejecución remota de código mediante el envío de un password especialmente diseñado cuando el servidor este configurado para soportar autenticación NTLM. |
|
Solución |
|
|
Si lo desea, aplique los mecanismos de actualización propios de su distribución, o bien baje las fuentes del software y compílelo usted mismo. Actualización de software Squid Proxy Web Cache Squid-Proxy 2.5.*-STABLE Squid-Proxy 3.*-PRE http://www.squid-cache.org/~wessels/patch/libntlmssp.c.patch Mandrake Linux Mandrakelinux 9.1 i386 ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/9.1/RPMS/squid-2.5.STABLE1-7.2.91mdk.i586.rpm ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/9.1/SRPMS/squid-2.5.STABLE1-7.2.91mdk.src.rpm PPC ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/ppc/9.1/RPMS/squid-2.5.STABLE1-7.2.91mdk.ppc.rpm ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/ppc/9.1/SRPMS/squid-2.5.STABLE1-7.2.91mdk.src.rpm Mandrakelinux 9.2 i386 ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/9.2/RPMS/squid-2.5.STABLE3-3.2.92mdk.i586.rpm ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/9.2/SRPMS/squid-2.5.STABLE3-3.2.92mdk.src.rpm AMD64 ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/amd64/9.2/RPMS/squid-2.5.STABLE3-3.2.92mdk.amd64.rpm ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/amd64/9.2/SRPMS/squid-2.5.STABLE3-3.2.92mdk.src.rpm Mandrakelinux 10.0 i386 ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/10.0/RPMS/squid-2.5.STABLE4-1.2.100mdk.i586.rpm ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/10.0/SRPMS/squid-2.5.STABLE4-1.2.100mdk.src.rpm AMD64 ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/amd64/10.0/RPMS/squid-2.5.STABLE4-1.2.100mdk.amd64.rpm ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/amd64/10.0/SRPMS/squid-2.5.STABLE4-1.2.100mdk.src.rpm Red Hat Linux Red Hat Desktop (v. 3) AMD64 squid-2.5.STABLE3-6.3E.x86_64.rpm SRPMS squid-2.5.STABLE3-6.3E.src.rpm i386 squid-2.5.STABLE3-6.3E.i386.rpm https://rhn.redhat.com/ Red Hat Enterprise Linux AS (v. 3) AMD64 squid-2.5.STABLE3-6.3E.x86_64.rpm SRPMS squid-2.5.STABLE3-6.3E.src.rpm i386 squid-2.5.STABLE3-6.3E.i386.rpm ia64 squid-2.5.STABLE3-6.3E.ia64.rpm ppc squid-2.5.STABLE3-6.3E.ppc.rpm ppc64 squid-2.5.STABLE3-6.3E.ppc64.rpm s390 squid-2.5.STABLE3-6.3E.s390.rpm s390x squid-2.5.STABLE3-6.3E.s390x.rpm https://rhn.redhat.com/ Red Hat Enterprise Linux ES (v. 3) AMD64 squid-2.5.STABLE3-6.3E.x86_64.rpm SRPMS squid-2.5.STABLE3-6.3E.src.rpm i386 squid-2.5.STABLE3-6.3E.i386.rpm ia64 squid-2.5.STABLE3-6.3E.ia64.rpm https://rhn.redhat.com/ Red Hat Enterprise Linux WS (v. 3) AMD64 squid-2.5.STABLE3-6.3E.x86_64.rpm SRPMS squid-2.5.STABLE3-6.3E.src.rpm i386 squid-2.5.STABLE3-6.3E.i386.rpm ia64 squid-2.5.STABLE3-6.3E.ia64.rpm https://rhn.redhat.com/ SuSE Linux SuSE-9.1 i386 ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/squid-2.5.STABLE5-42.9.i586.rpm ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/squid-2.5.STABLE5-42.9.i586.patch.rpm ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/src/squid-2.5.STABLE5-42.9.src.rpm Opteron x86_64 ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/squid-2.5.STABLE5-42.9.x86_64.rpm ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/squid-2.5.STABLE5-42.9.x86_64.patch.rpm ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/src/squid-2.5.STABLE5-42.9.src.rpm SuSE-9.0 i386 ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/squid-2.5.STABLE3-110.i586.rpm ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/squid-2.5.STABLE3-110.i586.patch.rpm ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/src/squid-2.5.STABLE3-110.src.rpm Opteron x86_64 ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/squid-2.5.STABLE3-110.x86_64.rpm ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/squid-2.5.STABLE3-110.x86_64.patch.rpm ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/src/squid-2.5.STABLE3-110.src.rpm SuSE-8.2 i386 ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/i586/squid-2.5.STABLE1-98.i586.rpm ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/i586/squid-2.5.STABLE1-98.i586.patch.rpm ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/src/squid-2.5.STABLE1-98.src.rpm SuSE-8.0 i386 ftp://ftp.suse.com/pub/suse/i386/update/8.0/n2/squid-2.4.STABLE6-9.i386.rpm ftp://ftp.suse.com/pub/suse/i386/update/8.0/n2/squid-2.4.STABLE6-9.i386.patch.rpm ftp://ftp.suse.com/pub/suse/i386/update/8.0/zq1/squid-2.4.STABLE6-9.src.rpm |
|
Identificadores estándar |
|
| Propiedad | Valor |
| CVE | CAN-2004-0541 |
| BID | |
Recursos adicionales |
|
|
iDEFENSE Security Advisory 06.08.04 http://www.idefense.com/application/poi/display?id=107&type=vulnerabilities&flashstatus=true Mandrakesoft Security Advisory MDKSA-2004:059 ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/amd64/10.0/SRPMS/squid-2.5.STABLE4-1.2.100mdk.src.rpm Red Hat Security Advisory RHSA-2004:242-06 https://rhn.redhat.com/errata/RHSA-2004-242.html SUSE Security Announcement SuSE-SA:2004:016 http://www.suse.de/de/security/2004_16_squid.html |
|
Histórico de versiones |
||
| Versión | Comentario | Data |
| 1.0 | Aviso emitido | 2004-06-10 |