• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Focus On: Vista
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns

• info
• discussion
• exploit
• solution
• references

Squid cachemgr.cgi Unauthorized Connection Vulnerability

Solution:
Please see the referenced vendor advisories for more information and fixes.


National Science Foundation Squid Web Proxy 2.2

• RedHat 5.2 (alpha): squid-2.2.STABLE4-5.alpha
  ftp://updates.redhat.com/6.0/alpha/squid-2.2.STABLE4-5.alpha.rpm


• RedHat 5.2 (i386): squid-2.2.STABLE4-5.i386
  ftp://updates.redhat.com/6.0/i386/squid-2.2.STABLE4-5.i386.rpm


• RedHat 5.2 (sparc): squid-2.2.STABLE4-5.sparc
  ftp://updates.redhat.com/6.0/sparc/squid-2.2.STABLE4-5.sparc.rpm


• RedHat 6.0 (alpha): squid-2.2.STABLE4-0.5.2.alpha
  ftp://updates.redhat.com/5.2/alpha/squid-2.2.STABLE4-0.5.2.alpha.rpm


• RedHat 6.0 (i386): squid-2.2.STABLE4-0.5.2.i386
  ftp://updates.redhat.com/5.2/i386/squid-2.2.STABLE4-0.5.2.i386.rpm


• RedHat 6.0 (sparc): squid-2.2.STABLE4-0.5.2.sparc
  ftp://updates.redhat.com/5.2/sparc/squid-2.2.STABLE4-0.5.2.sparc.rpm