Squid Web Proxy Cache HTCP请求处理远程拒绝服务漏洞

发表评论 (0) 查看评论

漏洞起因
异常条件处理失败错误
危险等级
低
 
影响系统
Squid Web Proxy Cache 3.0 PRE3
Squid Web Proxy Cache 3.0 PRE2
Squid Web Proxy Cache 3.0 PRE1
Squid Web Proxy Cache 3.0
Squid Web Proxy Cache 2.5 .STABLE9
Squid Web Proxy Cache 2.5 .STABLE8
Squid Web Proxy Cache 2.5 .STABLE7
Squid Web Proxy Cache 2.5 .STABLE6
Squid Web Proxy Cache 2.5 .STABLE5
Squid Web Proxy Cache 2.5 .STABLE4
Squid Web Proxy Cache 2.5 .STABLE3
Squid Web Proxy Cache 2.5 .STABLE10
Squid Web Proxy Cache 2.5 .STABLE10
Squid Web Proxy Cache 2.5 .STABLE1
Squid Web Proxy Cache 2.4 .STABLE7
Squid Web Proxy Cache 2.4 .STABLE6
Squid Web Proxy Cache 2.4 .STABLE4
Squid Web Proxy Cache 2.4 .STABLE2
Squid Web Proxy Cache 2.4
Squid Web Proxy Cache 2.3 .STABLE5
Squid Web Proxy Cache 2.3 .STABLE4
Squid Web Proxy Cache 2.1 PATCH2
Squid Web Proxy Cache 2.0 PATCH2
Squid Web Proxy Cache 3.0.STABLE7
Squid Web Proxy Cache 3.0.STABLE6
Squid Web Proxy Cache 3.0.STABLE5
Squid Web Proxy Cache 3.0.STABLE4
Squid Web Proxy Cache 3.0.STABLE3
Squid Web Proxy Cache 3.0.STABLE23
Squid Web Proxy Cache 3.0.STABLE22
Squid Web Proxy Cache 3.0.STABLE21
Squid Web Proxy Cache 3.0.STABLE2
Squid Web Proxy Cache 3.0.STABLE17
Squid Web Proxy Cache 3.0.STABLE16
Squid Web Proxy Cache 3.0.STABLE13
Squid Web Proxy Cache 3.0.STABLE12
Squid Web Proxy Cache 3.0.STABLE1
Squid Web Proxy Cache 2.7.STABLE6
Squid Web Proxy Cache 2.7.STABLE5
Squid Web Proxy Cache 2.7
Squid Web Proxy Cache 2.6.STABLE7
Squid Web Proxy Cache 2.6.STABLE6
Squid Web Proxy Cache 2.6.STABLE5
Squid Web Proxy Cache 2.6.STABLE4
Squid Web Proxy Cache 2.6.STABLE3
Squid Web Proxy Cache 2.6.STABLE2
Squid Web Proxy Cache 2.6.STABLE18
Squid Web Proxy Cache 2.6.STABLE17
Squid Web Proxy Cache 2.6.STABLE16
Squid Web Proxy Cache 2.6.STABLE15
Squid Web Proxy Cache 2.6.STABLE14
Squid Web Proxy Cache 2.6.STABLE13
Squid Web Proxy Cache 2.6.STABLE12
Squid Web Proxy Cache 2.6.STABLE1
Squid Web Proxy Cache 2.6
Squid Web Proxy Cache 2.5.STABLE14
Squid Web Proxy Cache 2.5.STABLE13
Squid Web Proxy Cache 2.5.STABLE12
Squid Web Proxy Cache 2.5.STABLE11
 
不受影响系统
Squid Web Proxy Cache 3.0.STABLE24
 
危害
远程攻击者可利用漏洞使服务崩溃。
 
攻击所需条件
攻击者必须访问Squid Web Proxy Cache。
 
漏洞信息
Squid Web Proxy Cache是一款免费，开放源代码的代理服务器。
当Squid Web Proxy Cache HTCP端口打开时，攻击者可提交特殊的HTCP请求使服务程序触发空指针引用而使应用服务崩溃。
 
测试方法
 
厂商解决方案
用户可参考如下供应商提供的安全补丁：
Squid Web Proxy Cache 3.0.STABLE7
?Squid 3.0-ADV-2010_2.patch
http://www.squid-cache.org/Versions/v3/3.0/changesets/3.0-ADV-2010_2.p atch
Squid Web Proxy Cache 3.0.STABLE17
?Squid 3.0-ADV-2010_2.patch
http://www.squid-cache.org/Versions/v3/3.0/changesets/3.0-ADV-2010_2.p atch
Squid Web Proxy Cache 2.7
?Squid 12600.patch
http://www.squid-cache.org/Versions/v2/2.7/changesets/12600.patch
Squid Web Proxy Cache 2.6.STABLE7
?Squid 12600.patch
http://www.squid-cache.org/Versions/v2/2.7/changesets/12600.patch
Squid Web Proxy Cache 3.0.STABLE22
?Squid 3.0-ADV-2010_2.patch
http://www.squid-cache.org/Versions/v3/3.0/changesets/3.0-ADV-2010_2.p atch
Squid Web Proxy Cache 2.6.STABLE4
?Squid 12600.patch
http://www.squid-cache.org/Versions/v2/2.7/changesets/12600.patch
Squid Web Proxy Cache 2.6.STABLE18
?Squid 12600.patch
http://www.squid-cache.org/Versions/v2/2.7/changesets/12600.patch
Squid Web Proxy Cache 3.0.STABLE5
?Squid 3.0-ADV-2010_2.patch
http://www.squid-cache.org/Versions/v3/3.0/changesets/3.0-ADV-2010_2.p atch
Squid Web Proxy Cache 3.0.STABLE2
?Squid 3.0-ADV-2010_2.patch
http://www.squid-cache.org/Versions/v3/3.0/changesets/3.0-ADV-2010_2.p atch
Squid Web Proxy Cache 2.7.STABLE6
?Squid 12600.patch
http://www.squid-cache.org/Versions/v2/2.7/changesets/12600.patch
Squid Web Proxy Cache 3.0.STABLE3
?Squid 3.0-ADV-2010_2.patch
http://www.squid-cache.org/Versions/v3/3.0/changesets/3.0-ADV-2010_2.p atch
Squid Web Proxy Cache 2.5.STABLE12
?Squid 12600.patch
http://www.squid-cache.org/Versions/v2/2.7/changesets/12600.patch
Squid Web Proxy Cache 3.0.STABLE4
?Squid 3.0-ADV-2010_2.patch
http://www.squid-cache.org/Versions/v3/3.0/changesets/3.0-ADV-2010_2.p atch
Squid Web Proxy Cache 2.6.STABLE3
?Squid 12600.patch
http://www.squid-cache.org/Versions/v2/2.7/changesets/12600.patch
Squid Web Proxy Cache 3.0.STABLE21
?Squid 3.0-ADV-2010_2.patch
http://www.squid-cache.org/Versions/v3/3.0/changesets/3.0-ADV-2010_2.p atch
Squid Web Proxy Cache 2.6.STABLE12
?Squid 12600.patch
http://www.squid-cache.org/Versions/v2/2.7/changesets/12600.patch
Squid Web Proxy Cache 2.6.STABLE16
?Squid 12600.patch
http://www.squid-cache.org/Versions/v2/2.7/changesets/12600.patch
Squid Web Proxy Cache 2.6.STABLE15
?Squid 12600.patch
http://www.squid-cache.org/Versions/v2/2.7/changesets/12600.patch
Squid Web Proxy Cache 2.6.STABLE14
?Squid 12600.patch
http://www.squid-cache.org/Versions/v2/2.7/changesets/12600.patch
Squid Web Proxy Cache 3.0.STABLE6
?Squid 3.0-ADV-2010_2.patch
http://www.squid-cache.org/Versions/v3/3.0/changesets/3.0-ADV-2010_2.p atch
Squid Web Proxy Cache 3.0.STABLE1
?Squid 3.0-ADV-2010_2.patch
http://www.squid-cache.org/Versions/v3/3.0/changesets/3.0-ADV-2010_2.p atch
Squid Web Proxy Cache 3.0.STABLE12
?Squid 3.0-ADV-2010_2.patch
http://www.squid-cache.org/Versions/v3/3.0/changesets/3.0-ADV-2010_2.p atch
Squid Web Proxy Cache 2.6.STABLE2
?Squid 12600.patch
http://www.squid-cache.org/Versions/v2/2.7/changesets/12600.patch
Squid Web Proxy Cache 2.7.STABLE5
?Squid 12600.patch
http://www.squid-cache.org/Versions/v2/2.7/changesets/12600.patch
Squid Web Proxy Cache 3.0.STABLE13
?Squid 3.0-ADV-2010_2.patch
http://www.squid-cache.org/Versions/v3/3.0/changesets/3.0-ADV-2010_2.p atch
Squid Web Proxy Cache 2.6.STABLE17
?Squid 12600.patch
http://www.squid-cache.org/Versions/v2/2.7/changesets/12600.patch
Squid Web Proxy Cache 3.0.STABLE16
?Squid 3.0-ADV-2010_2.patch
http://www.squid-cache.org/Versions/v3/3.0/changesets/3.0-ADV-2010_2.p atch
Squid Web Proxy Cache 2.6.STABLE6
?Squid 12600.patch
http://www.squid-cache.org/Versions/v2/2.7/changesets/12600.patch
Squid Web Proxy Cache 2.6.STABLE5
?Squid 12600.patch
http://www.squid-cache.org/Versions/v2/2.7/changesets/12600.patch
Squid Web Proxy Cache 2.5.STABLE11
?Squid 12600.patch
http://www.squid-cache.org/Versions/v2/2.7/changesets/12600.patch
Squid Web Proxy Cache 2.6.STABLE13
?Squid 12600.patch
http://www.squid-cache.org/Versions/v2/2.7/changesets/12600.patch
Squid Web Proxy Cache 2.5.STABLE13
?Squid 12600.patch
http://www.squid-cache.org/Versions/v2/2.7/changesets/12600.patch
Squid Web Proxy Cache 2.6
?Squid 12600.patch
http://www.squid-cache.org/Versions/v2/2.7/changesets/12600.patch
Squid Web Proxy Cache 3.0.STABLE23
?Squid 3.0-ADV-2010_2.patch
http://www.squid-cache.org/Versions/v3/3.0/changesets/3.0-ADV-2010_2.p atch
Squid Web Proxy Cache 2.6.STABLE1
?Squid 12600.patch
http://www.squid-cache.org/Versions/v2/2.7/changesets/12600.patch
Squid Web Proxy Cache 2.5.STABLE14
?Squid 12600.patch
http://www.squid-cache.org/Versions/v2/2.7/changesets/12600.patch
Squid Web Proxy Cache 2.0 PATCH2
?Squid 12600.patch
http://www.squid-cache.org/Versions/v2/2.7/changesets/12600.patch
Squid Web Proxy Cache 2.1 PATCH2
?Squid 12600.patch
http://www.squid-cache.org/Versions/v2/2.7/changesets/12600.patch
Squid Web Proxy Cache 2.3 .STABLE4
?Squid 12600.patch
http://www.squid-cache.org/Versions/v2/2.7/changesets/12600.patch
Squid Web Proxy Cache 2.3 .STABLE5
?Squid 12600.patch
http://www.squid-cache.org/Versions/v2/2.7/changesets/12600.patch
Squid Web Proxy Cache 2.4 .STABLE4
?Squid 12600.patch
http://www.squid-cache.org/Versions/v2/2.7/changesets/12600.patch
Squid Web Proxy Cache 2.4 .STABLE7
?Squid 12600.patch
http://www.squid-cache.org/Versions/v2/2.7/changesets/12600.patch
Squid Web Proxy Cache 2.4 .STABLE6
?Squid 12600.patch
http://www.squid-cache.org/Versions/v2/2.7/changesets/12600.patch
Squid Web Proxy Cache 2.4
?Squid 12600.patch
http://www.squid-cache.org/Versions/v2/2.7/changesets/12600.patch
Squid Web Proxy Cache 2.4 .STABLE2
?Squid 12600.patch
http://www.squid-cache.org/Versions/v2/2.7/changesets/12600.patch
Squid Web Proxy Cache 2.5 .STABLE4
?Squid 12600.patch
http://www.squid-cache.org/Versions/v2/2.7/changesets/12600.patch
Squid Web Proxy Cache 2.5 .STABLE10
?Squid 12600.patch
http://www.squid-cache.org/Versions/v2/2.7/changesets/12600.patch
Squid Web Proxy Cache 2.5 .STABLE7
?Squid 12600.patch
http://www.squid-cache.org/Versions/v2/2.7/changesets/12600.patch
Squid Web Proxy Cache 2.5 .STABLE6
?Squid 12600.patch
http://www.squid-cache.org/Versions/v2/2.7/changesets/12600.patch
Squid Web Proxy Cache 2.5 .STABLE10
?Squid 12600.patch
http://www.squid-cache.org/Versions/v2/2.7/changesets/12600.patch
Squid Web Proxy Cache 2.5 .STABLE1
?Squid 12600.patch
http://www.squid-cache.org/Versions/v2/2.7/changesets/12600.patch
Squid Web Proxy Cache 2.5 .STABLE3
?Squid 12600.patch
http://www.squid-cache.org/Versions/v2/2.7/changesets/12600.patch
Squid Web Proxy Cache 2.5 .STABLE5
?Squid 12600.patch
http://www.squid-cache.org/Versions/v2/2.7/changesets/12600.patch
Squid Web Proxy Cache 2.5 .STABLE9
?Squid 12600.patch
http://www.squid-cache.org/Versions/v2/2.7/changesets/12600.patch
Squid Web Proxy Cache 2.5 .STABLE8
?Squid 12600.patch
http://www.squid-cache.org/Versions/v2/2.7/changesets/12600.patch
Squid Web Proxy Cache 3.0 PRE2
?Squid 3.0-ADV-2010_2.patch
http://www.squid-cache.org/Versions/v3/3.0/changesets/3.0-ADV-2010_2.p atch
Squid Web Proxy Cache 3.0 PRE3
?Squid 3.0-ADV-2010_2.patch
http://www.squid-cache.org/Versions/v3/3.0/changesets/3.0-ADV-2010_2.p atch
Squid Web Proxy Cache 3.0 PRE1
?Squid 3.0-ADV-2010_2.patch
http://www.squid-cache.org/Versions/v3/3.0/changesets/3.0-ADV-2010_2.p atch
Squid Web Proxy Cache 3.0
?Squid 3.0-ADV-2010_2.patch
http://www.squid-cache.org/Versions/v3/3.0/changesets/3.0-ADV-2010_2.p atch
 
漏洞提供者
Kieran Whitbread

发表评论？

0 条评论。

发表评论