The remote host is affected by the vulnerability described in GLSA-200701-22 (Squid: Multiple Denial of Service vulnerabilities)

    Squid fails to correctly handle ftp:// URI's. There is also an error in     the external_acl queue which can cause an infinite looping condition.
  Impact :

    An attacker could attempt to retrieve a specially crafted URI via a     Squid server causing the service to crash. If an attacker could     generate a sufficiently high load on the Squid services, they could     cause a Denial of Service by forcing Squid into an infinite loop.
  Workaround :

    There is no known workaround at this time.

Squidに2つの脆弱性があることが報告されました。悪意のある者がこれらの脆弱性を悪用し、サービス拒否を引き起こす可能性があります。

- This update fixes a remotely exploitable     denial-of-service bug in squid, that can be triggered by     using special ftp:// URLs. (CVE-2007-0247)

  - The packages are not vulnerable to a bug in external     ACLs. (CVE-2007-0248)

David Duncan Ross Palmer and Henrik Nordstrom discovered that squid incorrectly handled special characters in FTP URLs. Remote users with access to squid could crash the server leading to a denial of service.
(CVE-2007-0247)

Erick Dantas Rotole and Henrik Nordstrom discovered that squid could end up in an endless loop when exhausted of available external ACL helpers. Remote users with access to squid could cause CPU starvation, possibly leading to a denial of service. This does not affect a default Ubuntu installation, since external ACL helpers must be configured and used. (CVE-2007-0248).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

據報 Squid 具有兩個弱點，惡意使用者可利用這些弱點造成拒絕服務。

已报告 Squid 中存在两个漏洞，恶意人员可利用这些漏洞造成拒绝服务。

Two vulnerabilities have been reported in Squid, which can be exploited by malicious people to cause a denial of service.

This update fixes a remotely exploitable denial-of-service bug in squid, that can be triggered by using special ftp:// URLs.
(CVE-2007-0247) The packages are not vulnerable to a bug in external ACLs. (CVE-2007-0248)

A vulnerability in squid was discovered that could be remotely exploited by using a special ftp:// URL (CVE-2007-0247).

Another Denial of Service vulnerability was discovered in squid 2.6 that allows remote attackers to crash the server by causing an external_acl_queue overload (CVE-2007-0248).

Additionally, a bug in squid 2.6 for max_user_ip handling in ntlm_auth has been corrected.

The updated packages have been patched to correct this problem.

- Wed Jan 17 2007 Martin Stransky <stransky at redhat.com>
    - 7:2.5.STABLE14-3.FC5

    - added fix for #222883 - Squid crashes when receiving       certain FTP listings (CVE-2007-0247)

  - Thu Jun 8 2006 Martin Stransky <stransky at redhat.com>
    - 7:2.5.STABLE14-2.FC5

    - fix for squid BZ#1511 - assertion failed:
      HttpReply.c:105: 'rep'

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update fixes a remotely exploitable denial-of-service bug in squid, that can be triggered by using special ftp:// URLs.
(CVE-2007-0247) Additionally the 10.2 package needed a fix for another DoS bug (CVE-2007-0248) and for max_user_ip handling in ntlm_auth.

The remote Squid caching proxy, according to its version number, is vulnerable to multiple attack vectors. At the least, attackers would be able to crash the service.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
24258	GLSA-200701-22 : Squid: Multiple Denial of Service vulnerabilities	Nessus	Gentoo Local Security Checks	2007/1/26	2021/1/6	medium
24870	Squid < 2.6.STABLE7の複数のリモートDoS	Nessus	Firewalls	2007/3/20	2020/6/12	medium
41115	SuSE9 Security Update : squid (YOU Patch Number 11402)	Nessus	SuSE Local Security Checks	2009/9/24	2021/1/14	medium
28003	Ubuntu 6.06 LTS / 6.10 : squid vulnerabilities (USN-414-1)	Nessus	Ubuntu Local Security Checks	2007/11/10	2021/1/19	medium
24870	Squid < 2.6.STABLE7 多個遠端 DoS 弱點	Nessus	Firewalls	2007/3/20	2020/6/12	medium
24870	Squid < 2.6.STABLE7 多种远程 DoS	Nessus	Firewalls	2007/3/20	2020/6/12	medium
24870	Squid < 2.6.STABLE7 Multiple Remote DoS	Nessus	Firewalls	2007/3/20	2020/6/12	medium
29582	SuSE 10 Security Update : squid (ZYPP Patch Number 2502)	Nessus	SuSE Local Security Checks	2007/12/13	2021/1/14	medium
24640	Mandrake Linux Security Advisory : squid (MDKSA-2007:026)	Nessus	Mandriva Local Security Checks	2007/2/18	2021/1/6	medium
24226	Fedora Core 5 : squid-2.5.STABLE14-3.FC5 (2007-092)	Nessus	Fedora Local Security Checks	2007/1/18	2021/1/11	medium
27452	openSUSE 10 Security Update : squid (squid-2504)	Nessus	SuSE Local Security Checks	2007/10/17	2021/1/14	medium
3887	Squid < 2.6.STABLE7 Multiple Vulnerabilities	Nessus Network Monitor	Web Servers	2007/1/17	2019/3/6	medium
801041	Squid < 2.6 STABLE7 Multiple Vulnerabilities	Log Correlation Engine	Web Servers			medium

検出

プラグインの検索

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium