drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Denial of Service in Squid
Name: |
Denial of Service in Squid |
|
ID: |
USN-192-1 |
|
Distribution: |
Ubuntu |
|
Plattformen: |
Ubuntu 4.10, Ubuntu 5.04 |
|
Datum: |
Fr, 30. September 2005, 17:54 |
|
Referenzen: |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2917 |
|
Applikationen: |
Squid |
|
Originalnachricht |
--===============1114576405== Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="CE+1k2dSO48ffgeK" Content-Disposition: inline
--CE+1k2dSO48ffgeK Content-Type: text/plain; charset=us-ascii Content-Disposition: inline
=========================================================== Ubuntu Security Notice USN-192-1 September 30, 2005 squid vulnerability CAN-2005-2917 ===========================================================
A security issue affects the following Ubuntu releases:
Ubuntu 4.10 (Warty Warthog) Ubuntu 5.04 (Hoary Hedgehog)
The following packages are affected:
squid
The problem can be corrected by upgrading the affected package to version 2.5.5-6ubuntu0.11 (for Ubuntu 4.10), or 2.5.8-3ubuntu1.4 (for Ubuntu 5.04). In general, a standard system upgrade is sufficient to effect the necessary changes.
Details follow:
Mike Diggins discovered a remote Denial of Service vulnerability in Squid. Sending specially crafted NTML authentication requests to Squid caused the server to crash.
Updated packages for Ubuntu 4.10 (Warty Warthog):
Source archives:
squid_2.5.5-6ubuntu0.11.diff.gz Size/MD5: 284906 ac7a90a24a44a928de68f4384879b384 squid_2.5.5-6ubuntu0.11.dsc Size/MD5: 654 1aaf12b2ad68b4ea1a385ddd6165a6ed http://security.ubuntu.com/ubuntu/pool/main/s/squid/squid_2.5.5.orig.tar.gz Size/MD5: 1363967 6c7f3175b5fa04ab5ee68ce752e7b500
Architecture independent packages:
squid-common_2.5.5-6ubuntu0.11_all.deb Size/MD5: 191262 5a882b351e8ce384bc127fc331eb7b76
amd64 architecture (Athlon64, Opteron, EM64T Xeon)
squid-cgi_2.5.5-6ubuntu0.11_amd64.deb Size/MD5: 90658 4e341a366a061b14273fd1c320eee812 squid_2.5.5-6ubuntu0.11_amd64.deb Size/MD5: 813412 b1136963ef202e8a0eeff830fc8b83a5 squidclient_2.5.5-6ubuntu0.11_amd64.deb Size/MD5: 72014 a64ffe4843c80b140d5b1e6943ba175c
i386 architecture (x86 compatible Intel/AMD)
squid-cgi_2.5.5-6ubuntu0.11_i386.deb Size/MD5: 89174 8c69902ff6e5e990194feada217559fb squid_2.5.5-6ubuntu0.11_i386.deb Size/MD5: 729668 64e6e0cd653a75006464ecab67c0fb53 squidclient_2.5.5-6ubuntu0.11_i386.deb Size/MD5: 70758 1da81a7b2e5053cc12b22c62d52ef591
powerpc architecture (Apple Macintosh G3/G4/G5)
squid-cgi_2.5.5-6ubuntu0.11_powerpc.deb Size/MD5: 90094 037aaa45aec44796b62c7567493a0c39 squid_2.5.5-6ubuntu0.11_powerpc.deb Size/MD5: 797288 7b3d7ec52d457f18e44560165ce126d0 squidclient_2.5.5-6ubuntu0.11_powerpc.deb Size/MD5: 71516 2bc8311918948571b0a33d99189c8e72
Updated packages for Ubuntu 5.04 (Hoary Hedgehog):
Source archives:
squid_2.5.8-3ubuntu1.4.diff.gz Size/MD5: 307200 91d9803c825ce607dc8c5e5fa3463ae0 squid_2.5.8-3ubuntu1.4.dsc Size/MD5: 663 847e076f1ab5fab86a8e67096d89af37 http://security.ubuntu.com/ubuntu/pool/main/s/squid/squid_2.5.8.orig.tar.gz Size/MD5: 1383756 bbc1e77bd175462732fe5f0d822fd160
Architecture independent packages:
squid-common_2.5.8-3ubuntu1.4_all.deb Size/MD5: 194648 fda8012bd605c5db9454eb13236e81e7
amd64 architecture (Athlon64, Opteron, EM64T Xeon)
squid-cgi_2.5.8-3ubuntu1.4_amd64.deb Size/MD5: 93120 973e9895c6fa965e1993e2ec1f0e08f2 squid_2.5.8-3ubuntu1.4_amd64.deb Size/MD5: 821812 6ad39d6f1a49aaceaad8c4a0db455160 squidclient_2.5.8-3ubuntu1.4_amd64.deb Size/MD5: 75658 2a2a95567ed450a326ce77fd4b2bdff6
i386 architecture (x86 compatible Intel/AMD)
squid-cgi_2.5.8-3ubuntu1.4_i386.deb Size/MD5: 91494 d10300fe1ca4d20c8a084d184001b496 squid_2.5.8-3ubuntu1.4_i386.deb Size/MD5: 740156 01627c3e0b46c879331b5781f47c5cab squidclient_2.5.8-3ubuntu1.4_i386.deb Size/MD5: 74282 b132e60cbb92d59d9bf6bdeb0145d2ee
powerpc architecture (Apple Macintosh G3/G4/G5)
squid-cgi_2.5.8-3ubuntu1.4_powerpc.deb Size/MD5: 92606 ce1ff62d1c354b4806b712c694794dad squid_2.5.8-3ubuntu1.4_powerpc.deb Size/MD5: 809462 3e2bd61d2e9fa3b3edb515cd318dca26 squidclient_2.5.8-3ubuntu1.4_powerpc.deb Size/MD5: 75136 a6f3a96bb81a17eaaf3d2a49769f9c68
--CE+1k2dSO48ffgeK Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature Content-Disposition: inline
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (GNU/Linux)
iD8DBQFDPV2pDecnbV4Fd/IRAkFTAKDcpX0Bf8d0qhaHbMoxrGkps8xPqQCfSfG8 QlO6LgsYltCqAlumWL08LMM= =LBQ7 -----END PGP SIGNATURE-----
--CE+1k2dSO48ffgeK--
--===============1114576405== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline
-- ubuntu-security-announce mailing list ubuntu-security-announce@lists.ubuntu.com http://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce
--===============1114576405==--
|
|
|
|