Test Kennung:	1.3.6.1.4.1.25623.1.0.703327
Kategorie:	Debian Local Security Checks
Titel:	Debian Security Advisory DSA 3327-1 (squid3 - security update)
Zusammenfassung:	Alex Rousskov of The Measurement Factory;discovered that Squid3, a fully featured web proxy cache, does not correctly handle;CONNECT method peer responses when configured with cache_peer and operating on;explicit proxy traffic. This could allow remote clients to gain unrestricted;access through a gateway proxy to its backend proxy.
Beschreibung:	Summary: Alex Rousskov of The Measurement Factory discovered that Squid3, a fully featured web proxy cache, does not correctly handle CONNECT method peer responses when configured with cache_peer and operating on explicit proxy traffic. This could allow remote clients to gain unrestricted access through a gateway proxy to its backend proxy. Affected Software/OS: squid3 on Debian Linux Solution: For the oldstable distribution (wheezy), this problem has been fixed in version 3.1.20-2.2+deb7u3. For the stable distribution (jessie), this problem has been fixed in version 3.4.8-6+deb8u1. For the unstable distribution (sid), this problem has been fixed in version 3.5.6-1. We recommend that you upgrade your squid3 packages. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2015-5400 BugTraq ID: 75553 http://www.securityfocus.com/bid/75553 Debian Security Information: DSA-3327 (Google Search) http://www.debian.org/security/2015/dsa-3327 http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183598.html http://www.openwall.com/lists/oss-security/2015/07/06/8 http://www.openwall.com/lists/oss-security/2015/07/09/12 http://www.openwall.com/lists/oss-security/2015/07/10/2 http://www.openwall.com/lists/oss-security/2015/07/17/14 http://www.securitytracker.com/id/1032873 SuSE Security Announcement: SUSE-SU-2016:1996 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html SuSE Security Announcement: SUSE-SU-2016:2089 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html SuSE Security Announcement: openSUSE-SU-2016:2081 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html
Copyright	Copyright (c) 2015 Greenbone Networks GmbH http://greenbone.net

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.