|
|
Squid Proxy NULL URL Character Unauthorized Access Vulnerability
Solution: The vendor has released version 2.5 STABLE5 to address this issue. Turbolinux has released an advisory (TLSA-2004-24) and fixes to address this issue. Customers are advised to see the referenced advisory for further details regarding obtaining and applying appropriate fixes. SGI has released an advisory 20040404-01-U and fixes to address this issue. Please see referenced advisory for further details regarding obtaining and applying appropriate fixes. Fixes are linked below. Red Hat has released an advisory (RHSA-2004:133-12) and fixes to address this issue on Red Hat Linux Enterprise platforms. Customers who are affected by this issue are advised to apply the appropriate updates. Customers subscribed to the Red Hat Network may apply the appropriate fixes using the Red Hat Update Agent (up2date). Please see referenced advisory for additional information. Conectiva have released a security advisory (CLA-2004:838), and updates to address this issue in Conectiva products. Users are advised to apply these updates as soon as possible, further details regarding obtaining and installing these updates can be found in the referenced advisory. Red Hat has released an advisory (RHSA-2004:134-01) and fixes to address this issue on Red Hat Linux 9 platforms. Customers affected by this issue are advised to apply the appropriate updates. Please see referenced advisory for additional information, fix is linked below. Gentoo has released advisory GLSA 200403-11 to address this issue. To update the system, enter the following commands: # emerge sync # emerge -pv ">=net-www/squid-2.5.5" # emerge ">=net-www/squid-2.5.5" Mandrake has released an advisory MDKSA-2004:025 to address this issue. Please see the referenced advisory for more information. OpenPKG has released an advisory OpenPKG-SA-2004.008 to address this issue in OpenPKG CURRENT, 2.0 and 1.3. Please see the referenced advisory for more information. Debian has released advisory DSA 474-1 dealing with this issue. RedHat has released an advisory FEDORA-2004-104 to address this issue in Fedora. Please see the referenced advisory for more information. Trustix has released an advisory TSL-2004-0019 with fixes to address this issue. Please see the referenced advisory for more information. SGI has released an advisory (20040506-01-U) with Patch 10075 for SGI ProPack 3 to address this and other issues. Please see the referenced advisory for more information. SCO has released an advisory (SCOSA-2004.13) to address this issue for OpenServer 5.0.6 and 5.0.7. Please see the referenced advisory for further information on obtaining fixes for affected operating systems. SCO has released an advisory (SCOSA-2005.16) to address this issue in UnixWare 7.1.4. Please see the referenced advisory for further information on obtaining fixes. Squid Web Proxy Cache 2.0 PATCH2
Squid Web Proxy Cache 2.1 PATCH2
Squid Web Proxy Cache 2.3 .STABLE4
Squid Web Proxy Cache 2.3 .STABLE5
SGI ProPack 2.3
Squid Web Proxy Cache 2.4 .STABLE7
Squid Web Proxy Cache 2.4 .STABLE6
Squid Web Proxy Cache 2.4
Squid Web Proxy Cache 2.4 .STABLE2
SGI ProPack 2.4
Squid Web Proxy Cache 2.5 .STABLE4
Squid Web Proxy Cache 2.5 .STABLE1
Squid Web Proxy Cache 2.5 .STABLE3
SGI ProPack 3.0
SCO Unixware 7.1.4
|
|
Privacy Statement |