Squid Compressed DNS Buffer Overflow Vulnerability

Squid Compressed DNS Buffer Overflow Vulnerability

Solution:
Red Hat has provided an advisory and updated versions of Squid. It should be noted that Red Hat Linux 7.3 is not vulnerable to this issue.

HP has released an advisory. HP Secure OS 1.0 is vulnerable to this condition. HP has advised users to obtain and install the RPM packages listed for RedHat Advisory RHSA-2002-051. Further details are available in the advisory.

Updates are available.

National Science Foundation Squid Web Proxy 2.0

National Science Foundation squid-2.4.STABLE6-src.tar.gz
http://www.squid-cache.org/Versions/v2/2.4/squid-2.4.STABLE6-src.tar.g z

National Science Foundation Squid Web Proxy 2.1

National Science Foundation squid-2.4.STABLE6-src.tar.gz
http://www.squid-cache.org/Versions/v2/2.4/squid-2.4.STABLE6-src.tar.g z

National Science Foundation Squid Web Proxy 2.2

National Science Foundation squid-2.4.STABLE6-src.tar.gz
http://www.squid-cache.org/Versions/v2/2.4/squid-2.4.STABLE6-src.tar.g z

National Science Foundation Squid Web Proxy 2.2 STABLE5

National Science Foundation squid-2.4.STABLE6-src.tar.gz
http://www.squid-cache.org/Versions/v2/2.4/squid-2.4.STABLE6-src.tar.g z

National Science Foundation Squid Web Proxy 2.3

National Science Foundation squid-2.4.STABLE6-src.tar.gz
http://www.squid-cache.org/Versions/v2/2.4/squid-2.4.STABLE6-src.tar.g z

National Science Foundation Squid Web Proxy 2.3 STABLE5

National Science Foundation squid-2.4.STABLE6-src.tar.gz
http://www.squid-cache.org/Versions/v2/2.4/squid-2.4.STABLE6-src.tar.g z

National Science Foundation Squid Web Proxy 2.3 STABLE2

National Science Foundation squid-2.4.STABLE6-src.tar.gz
http://www.squid-cache.org/Versions/v2/2.4/squid-2.4.STABLE6-src.tar.g z

National Science Foundation Squid Web Proxy 2.3 STABLE4

Caldera squid-2.4.STABLE2-4.i386.rpm
ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1/Server/current/RPMS/sq uid-2.4.STABLE2-4.i386.rpm

National Science Foundation squid-2.4.STABLE6-src.tar.gz
http://www.squid-cache.org/Versions/v2/2.4/squid-2.4.STABLE6-src.tar.g z

Red Hat squid-2.4.STABLE6-6.6.2.alpha.rpm
Red Hat Linux 6.2 Alpha.
ftp://updates.redhat.com/6.2/en/os/alpha/squid-2.4.STABLE6-6.6.2.alpha .rpm

Red Hat squid-2.4.STABLE6-6.6.2.i386.rpm
Red Hat Linux 6.2 i386.
ftp://updates.redhat.com/6.2/en/os/i386/squid-2.4.STABLE6-6.6.2.i386.r pm

Red Hat squid-2.4.STABLE6-6.6.2.sparc.rpm
Red Hat Linux 6.2 sparc.
ftp://updates.redhat.com/6.2/en/os/sparc/squid-2.4.STABLE6-6.6.2.sparc .rpm

Red Hat squid-2.4.STABLE6-6.6.2.src.rpm
Red Hat Linux 6.2 source RPM.
ftp://updates.redhat.com/6.2/en/os/SRPMS/squid-2.4.STABLE6-6.6.2.src.r pm

Red Hat squid-2.4.STABLE6-6.7.0.alpha.rpm
Red Hat Linux 7.0 Alpha.
ftp://updates.redhat.com/7.0/en/os/alpha/squid-2.4.STABLE6-6.7.0.alpha .rpm

Red Hat squid-2.4.STABLE6-6.7.0.i386.rpm
Red Hat Linux 7.0 i386.
ftp://updates.redhat.com/7.0/en/os/i386/squid-2.4.STABLE6-6.7.0.i386.r pm

Red Hat squid-2.4.STABLE6-6.7.0.src.rpm
Red Hat Linux 7.0 source RPM.
ftp://updates.redhat.com/7.0/en/os/SRPMS/squid-2.4.STABLE6-6.7.0.src.r pm

Red Hat squid-2.4.STABLE6-6.7.1.alpha.rpm
Red Hat Linux 7.1 Alpha.
ftp://updates.redhat.com/7.1/en/os/alpha/squid-2.4.STABLE6-6.7.1.alpha .rpm

Red Hat squid-2.4.STABLE6-6.7.1.i386.rpm
Red Hat Linux 7.1 i386.
ftp://updates.redhat.com/7.1/en/os/i386/squid-2.4.STABLE6-6.7.1.i386.r pm

Red Hat squid-2.4.STABLE6-6.7.1.src.rpm
Red Hat Linux 7.1 source RPM.
ftp://updates.redhat.com/7.1/en/os/SRPMS/squid-2.4.STABLE6-6.7.1.src.r pm

Red Hat squid-2.4.STABLE6-6.7.3.i386.rpm
Red Hat Linux 7.2 i386.
ftp://updates.redhat.com/7.2/en/os/i386/squid-2.4.STABLE6-6.7.3.i386.r pm

Red Hat squid-2.4.STABLE6-6.7.3.ia64.rpm
Red Hat Linux 7.2 ia64.
ftp://updates.redhat.com/7.2/en/os/ia64/squid-2.4.STABLE6-6.7.3.ia64.r pm

Red Hat squid-2.4.STABLE6-6.7.3.src.rpm
Red Hat Linux 7.2 source RPM.
ftp://updates.redhat.com/7.2/en/os/SRPMS/squid-2.4.STABLE6-6.7.3.src.r pm

National Science Foundation Squid Web Proxy 2.3 STABLE3

National Science Foundation squid-2.4.STABLE6-src.tar.gz
http://www.squid-cache.org/Versions/v2/2.4/squid-2.4.STABLE6-src.tar.g z

National Science Foundation Squid Web Proxy 2.3.1

National Science Foundation squid-2.4.STABLE6-src.tar.gz
http://www.squid-cache.org/Versions/v2/2.4/squid-2.4.STABLE6-src.tar.g z

National Science Foundation Squid Web Proxy 2.4 STABLE4

Mandrake squid-2.4.STABLE6-1.1mdk.i586.rpm
Mandrake Linux 8.1.
http://www.mandrakesecure.net/en/ftp.php

Mandrake squid-2.4.STABLE6-1.1mdk.i586.rpm
Mandrake Linux 8.2.
http://www.mandrakesecure.net/en/ftp.php

Mandrake squid-2.4.STABLE6-1.1mdk.ia64.rpm
Mandrake Linux 8.1 ia64.
http://www.mandrakesecure.net/en/ftp.php

Mandrake squid-2.4.STABLE6-1.1mdk.ppc.rpm
Mandrake Linux 8.2 PPC.
http://www.mandrakesecure.net/en/ftp.php

Mandrake squid-2.4.STABLE6-1.1mdk.src.rpm
Mandrake Linux 8.1 ia64 Source RPM.
http://www.mandrakesecure.net/en/ftp.php

Mandrake squid-2.4.STABLE6-1.1mdk.src.rpm
Mandrake Linux 8.1 Source RPM.
http://www.mandrakesecure.net/en/ftp.php

Mandrake squid-2.4.STABLE6-1.1mdk.src.rpm
Mandrake Linux 8.2 PPC Source RPM.
http://www.mandrakesecure.net/en/ftp.php

Mandrake squid-2.4.STABLE6-1.1mdk.src.rpm
Mandrake Linux 8.2 Source RPM.
http://www.mandrakesecure.net/en/ftp.php

Mandrake squid-2.4.STABLE6-1.2mdk.i586.rpm
Mandrake Linux 8.0.
http://www.mandrakesecure.net/en/ftp.php

Mandrake squid-2.4.STABLE6-1.2mdk.ppc.rpm
Mandrake Linux 8.0 PPC.
http://www.mandrakesecure.net/en/ftp.php

Mandrake squid-2.4.STABLE6-1.2mdk.src.rpm
Mandrake Linux 8.0 PPC Source RPM.
http://www.mandrakesecure.net/en/ftp.php

Mandrake squid-2.4.STABLE6-1.2mdk.src.rpm
Mandrake Linux 8.0 Source RPM.
http://www.mandrakesecure.net/en/ftp.php

Mandrake squid-2.4.STABLE6-1.3mdk.i586.rpm
Mandrake Corporate Server 1.0.1.
http://www.mandrakesecure.net/en/ftp.php

Mandrake squid-2.4.STABLE6-1.3mdk.i586.rpm
Mandrake Linux 7.1.
http://www.mandrakesecure.net/en/ftp.php

Mandrake squid-2.4.STABLE6-1.3mdk.i586.rpm
Mandrake Linux 7.2.
http://www.mandrakesecure.net/en/ftp.php

Mandrake squid-2.4.STABLE6-1.3mdk.i586.rpm
Mandrake Single Network Firewall 7.2.
http://www.mandrakesecure.net/en/ftp.php

Mandrake squid-2.4.STABLE6-1.3mdk.src.rpm
Mandrake Corporate Server 1.0.1 Source RPM.
http://www.mandrakesecure.net/en/ftp.php

Mandrake squid-2.4.STABLE6-1.3mdk.src.rpm
Mandrake Linux 7.1 Source RPM.
http://www.mandrakesecure.net/en/ftp.php

Mandrake squid-2.4.STABLE6-1.3mdk.src.rpm
Mandrake Linux 7.2 Source RPM.
http://www.mandrakesecure.net/en/ftp.php

Mandrake squid-2.4.STABLE6-1.3mdk.src.rpm
Mandrake Single Network Firewall 7.2 Source RPM.
http://www.mandrakesecure.net/en/ftp.php

National Science Foundation squid-2.4.STABLE6-src.tar.gz
http://www.squid-cache.org/Versions/v2/2.4/squid-2.4.STABLE6-src.tar.g z

National Science Foundation Squid Web Proxy 2.4 STABLE2

Caldera CSSA-2002-SCO.26
ftp://ftp.caldera.com/pub/updates/OpenServer/CSSA-2002-SCO.26/

Caldera squid-2.4.STABLE2-4.i386.rpm
ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1.1/Server/current/RPMS/ squid-2.4.STABLE2-4.i386.rpm

National Science Foundation squid-2.4.STABLE6-src.tar.gz
http://www.squid-cache.org/Versions/v2/2.4/squid-2.4.STABLE6-src.tar.g z

National Science Foundation Squid Web Proxy 2.4

FreeBSD squid-2.4_8.tgz
ftp.FreeBSD.org/pub/FreeBSD/ports/i386/packages-4-stable/www/squid-2.4 _8.tgz

National Science Foundation squid-2.4.STABLE6-src.tar.gz
http://www.squid-cache.org/Versions/v2/2.4/squid-2.4.STABLE6-src.tar.g z

National Science Foundation Squid Web Proxy 2.4 STABLE3

National Science Foundation squid-2.4.STABLE6-src.tar.gz
http://www.squid-cache.org/Versions/v2/2.4/squid-2.4.STABLE6-src.tar.g z

National Science Foundation Squid Web Proxy 2.4 STABLE1

National Science Foundation squid-2.4.STABLE6-src.tar.gz
http://www.squid-cache.org/Versions/v2/2.4/squid-2.4.STABLE6-src.tar.g z