Squid Proxy Client NTLM Authentication Denial Of Service Vulnerability

Squid Proxy Client NTLM Authentication Denial Of Service Vulnerability

Solution:

Please see the referenced vendor advisories for more information and fixes.

Squid Web Proxy Cache 2.5 .STABLE4

Mandriva squid-2.5.STABLE9-1.3.C30mdk.i586.rpm
Corporate 3.0
http://www1.mandrivalinux.com/en/ftp.php3

Mandriva squid-2.5.STABLE9-1.3.C30mdk.x86_64.rpm
Corporate 3.0/X86_64
http://www1.mandrivalinux.com/en/ftp.php3

Mandriva squid-2.5.STABLE9-1.4.C30mdk.i586.rpm
Corporate 3.0:
http://www1.mandrivalinux.com/en/ftp.php3

Mandriva squid-2.5.STABLE9-1.4.C30mdk.x86_64.rpm
Corporate 3.0/X86_64:
http://www1.mandrivalinux.com/en/ftp.php3

Squid squid-2.5.STABLE11.tar.gz
http://www.squid-cache.org/Versions/v2/2.5/squid-2.5.STABLE11.tar.gz

Squid Web Proxy Cache 2.5 .STABLE10

Mandriva squid-2.5.STABLE10-10.1.20060mdk.i586.rpm
Mandrivalinux 2006.0:
http://www1.mandrivalinux.com/en/ftp.php3

Mandriva squid-2.5.STABLE10-10.1.20060mdk.x86_64.rpm
Mandrivalinux 2006.0/X86_64:
http://www1.mandrivalinux.com/en/ftp.php3

Mandriva squid-cachemgr-2.5.STABLE10-10.1.20060mdk.i586.rpm
Mandrivalinux 2006.0:
http://www1.mandrivalinux.com/en/ftp.php3

Mandriva squid-cachemgr-2.5.STABLE10-10.1.20060mdk.x86_64.rpm
Mandrivalinux 2006.0/X86_64:
http://www1.mandrivalinux.com/en/ftp.php3

Squid squid-2.5.STABLE11.tar.gz
http://www.squid-cache.org/Versions/v2/2.5/squid-2.5.STABLE11.tar.gz

Squid Web Proxy Cache 2.5 .STABLE7

Squid squid-2.5.STABLE11.tar.gz
http://www.squid-cache.org/Versions/v2/2.5/squid-2.5.STABLE11.tar.gz

Squid Web Proxy Cache 2.5 .STABLE6

Mandriva squid-2.5.STABLE9-1.3.101mdk.i586.rpm
Mandrakelinux 10.1
http://www1.mandrivalinux.com/en/ftp.php3

Mandriva squid-2.5.STABLE9-1.3.101mdk.x86_64.rpm
Mandrakelinux 10.1/X86_64
http://www1.mandrivalinux.com/en/ftp.php3

Mandriva squid-2.5.STABLE9-1.3.102mdk.i586.rpm
Mandrakelinux 10.2
http://www1.mandrivalinux.com/en/ftp.php3

Mandriva squid-2.5.STABLE9-1.3.102mdk.x86_64.rpm
Mandrakelinux 10.2/X86_64
http://www1.mandrivalinux.com/en/ftp.php3

Mandriva squid-2.5.STABLE9-1.4.101mdk.i586.rpm
Mandrivalinux 10.1:
http://www1.mandrivalinux.com/en/ftp.php3

Mandriva squid-2.5.STABLE9-1.4.101mdk.x86_64.rpm
Mandrivalinux 10.1/X86_64:
http://www1.mandrivalinux.com/en/ftp.php3

Mandriva squid-2.5.STABLE9-1.4.102mdk.x86_64.rpm
Mandrivalinux 10.2/X86_64:
http://www1.mandrivalinux.com/en/ftp.php3

Squid squid-2.5.STABLE11.tar.gz
http://www.squid-cache.org/Versions/v2/2.5/squid-2.5.STABLE11.tar.gz

Squid Web Proxy Cache 2.5 .STABLE1

RedHat squid-2.5.STABLE1-9.10.legacy.i386.rpm
Red Hat Linux 9:
http://download.fedoralegacy.org/redhat/9/updates/i386/squid-2.5.STABL E1-9.10.legacy.i386.rpm

Squid squid-2.5.STABLE11.tar.gz
http://www.squid-cache.org/Versions/v2/2.5/squid-2.5.STABLE11.tar.gz

Squid Web Proxy Cache 2.5 .STABLE3

RedHat squid-2.5.STABLE3-2.fc1.6.legacy.i386.rpm
Fedora Core 1:
http://download.fedoralegacy.org/fedora/1/updates/i386/squid-2.5.STABL E3-2.fc1.6.legacy.i386.rpm

Squid squid-2.5.STABLE11.tar.gz
http://www.squid-cache.org/Versions/v2/2.5/squid-2.5.STABLE11.tar.gz

Squid Web Proxy Cache 2.5 .STABLE5

RedHat squid-2.5.STABLE9-1.FC2.4.legacy.i386.rpm
Fedora Core 2:
http://download.fedoralegacy.org/fedora/2/updates/i386/squid-2.5.STABL E9-1.FC2.4.legacy.i386.rpm

Squid squid-2.5.STABLE11.tar.gz
http://www.squid-cache.org/Versions/v2/2.5/squid-2.5.STABLE11.tar.gz

Ubuntu squid-cgi_2.5.5-6ubuntu0.2_amd64.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/universe/s/squid/squid-cgi_2.5. 5-6ubuntu0.2_amd64.deb

Ubuntu squid-cgi_2.5.5-6ubuntu0.2_i386.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/universe/s/squid/squid-cgi_2.5. 5-6ubuntu0.2_i386.deb

Ubuntu squid-cgi_2.5.5-6ubuntu0.2_powerpc.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/universe/s/squid/squid-cgi_2.5. 5-6ubuntu0.2_powerpc.deb

Ubuntu squid-common_2.5.5-6ubuntu0.2_all.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/main/s/squid/squid-common_2.5.5 -6ubuntu0.2_all.deb

Ubuntu squid_2.5.5-6ubuntu0.2_amd64.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/main/s/squid/squid_2.5.5-6ubunt u0.2_amd64.deb

Ubuntu squid_2.5.5-6ubuntu0.2_i386.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/main/s/squid/squid_2.5.5-6ubunt u0.2_i386.deb

Ubuntu squid_2.5.5-6ubuntu0.2_powerpc.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/main/s/squid/squid_2.5.5-6ubunt u0.2_powerpc.deb

Ubuntu squidclient_2.5.5-6ubuntu0.2_amd64.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/universe/s/squid/squidclient_2. 5.5-6ubuntu0.2_amd64.deb

Ubuntu squidclient_2.5.5-6ubuntu0.2_i386.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/universe/s/squid/squidclient_2. 5.5-6ubuntu0.2_i386.deb

Ubuntu squidclient_2.5.5-6ubuntu0.2_powerpc.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/universe/s/squid/squidclient_2. 5.5-6ubuntu0.2_powerpc.deb

Ubuntu squid-cgi_2.5.5-6ubuntu0.11_amd64.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/universe/s/squid/squid-cgi_2.5. 5-6ubuntu0.11_amd64.deb

Ubuntu squid-cgi_2.5.5-6ubuntu0.11_i386.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/universe/s/squid/squid-cgi_2.5. 5-6ubuntu0.11_i386.deb

Ubuntu squid-cgi_2.5.5-6ubuntu0.11_powerpc.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/universe/s/squid/squid-cgi_2.5. 5-6ubuntu0.11_powerpc.deb

Ubuntu squid-common_2.5.5-6ubuntu0.11_all.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/main/s/squid/squid-common_2.5.5 -6ubuntu0.11_all.deb

Ubuntu squid_2.5.5-6ubuntu0.11_amd64.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/main/s/squid/squid_2.5.5-6ubunt u0.11_amd64.deb

Ubuntu squid_2.5.5-6ubuntu0.11_i386.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/main/s/squid/squid_2.5.5-6ubunt u0.11_i386.deb

Ubuntu squid_2.5.5-6ubuntu0.11_powerpc.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/main/s/squid/squid_2.5.5-6ubunt u0.11_powerpc.deb

Ubuntu squidclient_2.5.5-6ubuntu0.11_amd64.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/universe/s/squid/squidclient_2. 5.5-6ubuntu0.11_amd64.deb

Ubuntu squidclient_2.5.5-6ubuntu0.11_i386.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/universe/s/squid/squidclient_2. 5.5-6ubuntu0.11_i386.deb

Ubuntu squidclient_2.5.5-6ubuntu0.11_powerpc.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/universe/s/squid/squidclient_2. 5.5-6ubuntu0.11_powerpc.deb

Squid Web Proxy Cache 2.5 .STABLE9

Debian squid-cgi_2.5.9-10sarge2_alpha.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/s/squid/squid-cgi_2.5.9-1 0sarge2_alpha.deb

Debian squid-cgi_2.5.9-10sarge2_amd64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/s/squid/squid-cgi_2.5.9-1 0sarge2_amd64.deb

Debian squid-cgi_2.5.9-10sarge2_arm.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/s/squid/squid-cgi_2.5.9-1 0sarge2_arm.deb

Debian squid-cgi_2.5.9-10sarge2_hppa.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/s/squid/squid-cgi_2.5.9-1 0sarge2_hppa.deb

Debian squid-cgi_2.5.9-10sarge2_i386.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/s/squid/squid-cgi_2.5.9-1 0sarge2_i386.deb

Debian squid-cgi_2.5.9-10sarge2_ia64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/s/squid/squid-cgi_2.5.9-1 0sarge2_ia64.deb

Debian squid-cgi_2.5.9-10sarge2_m68k.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/s/squid/squid-cgi_2.5.9-1 0sarge2_m68k.deb

Debian squid-cgi_2.5.9-10sarge2_mips.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/s/squid/squid-cgi_2.5.9-1 0sarge2_mips.deb

Debian squid-cgi_2.5.9-10sarge2_mipsel.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/s/squid/squid-cgi_2.5.9-1 0sarge2_mipsel.deb

Debian squid-cgi_2.5.9-10sarge2_powerpc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/s/squid/squid-cgi_2.5.9-1 0sarge2_powerpc.deb

Debian squid-cgi_2.5.9-10sarge2_s390.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/s/squid/squid-cgi_2.5.9-1 0sarge2_s390.deb

Debian squid-common_2.5.9-10sarge2_all.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/s/squid/squid-common_2.5. 9-10sarge2_all.deb

Debian squid_2.5.9-10sarge2_alpha.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/s/squid/squid_2.5.9-10sar ge2_alpha.deb

Debian squid_2.5.9-10sarge2_amd64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/s/squid/squid_2.5.9-10sar ge2_amd64.deb

Debian squid_2.5.9-10sarge2_arm.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/s/squid/squid_2.5.9-10sar ge2_arm.deb

Debian squid_2.5.9-10sarge2_hppa.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/s/squid/squid_2.5.9-10sar ge2_hppa.deb

Debian squid_2.5.9-10sarge2_i386.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/s/squid/squid_2.5.9-10sar ge2_i386.deb

Debian squid_2.5.9-10sarge2_ia64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/s/squid/squid_2.5.9-10sar ge2_ia64.deb

Debian squid_2.5.9-10sarge2_m68k.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/s/squid/squid_2.5.9-10sar ge2_m68k.deb

Debian squid_2.5.9-10sarge2_mips.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/s/squid/squid_2.5.9-10sar ge2_mips.deb

Debian squid_2.5.9-10sarge2_mipsel.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/s/squid/squid_2.5.9-10sar ge2_mipsel.deb

Debian squid_2.5.9-10sarge2_powerpc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/s/squid/squid_2.5.9-10sar ge2_powerpc.deb

Debian squid_2.5.9-10sarge2_s390.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/s/squid/squid_2.5.9-10sar ge2_s390.deb

Debian squidclient_2.5.9-10sarge2_alpha.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/s/squid/squidclient_2.5.9 -10sarge2_alpha.deb

Debian squidclient_2.5.9-10sarge2_amd64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/s/squid/squidclient_2.5.9 -10sarge2_amd64.deb

Debian squidclient_2.5.9-10sarge2_arm.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/s/squid/squidclient_2.5.9 -10sarge2_arm.deb

Debian squidclient_2.5.9-10sarge2_hppa.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/s/squid/squidclient_2.5.9 -10sarge2_hppa.deb

Debian squidclient_2.5.9-10sarge2_i386.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/s/squid/squidclient_2.5.9 -10sarge2_i386.deb

Debian squidclient_2.5.9-10sarge2_ia64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/s/squid/squidclient_2.5.9 -10sarge2_ia64.deb

Debian squidclient_2.5.9-10sarge2_m68k.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/s/squid/squidclient_2.5.9 -10sarge2_m68k.deb

Debian squidclient_2.5.9-10sarge2_mips.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/s/squid/squidclient_2.5.9 -10sarge2_mips.deb

Debian squidclient_2.5.9-10sarge2_mipsel.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/s/squid/squidclient_2.5.9 -10sarge2_mipsel.deb

Debian squidclient_2.5.9-10sarge2_powerpc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/s/squid/squidclient_2.5.9 -10sarge2_powerpc.deb

Debian squidclient_2.5.9-10sarge2_s390.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/s/squid/squidclient_2.5.9 -10sarge2_s390.deb

Squid squid-2.5.STABLE11.tar.gz
http://www.squid-cache.org/Versions/v2/2.5/squid-2.5.STABLE11.tar.gz

Squid Web Proxy Cache 2.5 .STABLE8

Squid squid-2.5.STABLE11.tar.gz
http://www.squid-cache.org/Versions/v2/2.5/squid-2.5.STABLE11.tar.gz