PT-2009-6053 · Squid+1 · Squid+1

Publicado 2009-10-28 · Atualizado 2024-06-15 · CVE-2009-3826

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions squidGuard version 1.4

Description The issue is related to multiple buffer overflows that allow remote attackers to bypass intended URL blocking via a long URL. This is connected to the relationship between buffer sizes in squidGuard and Squid, as well as redirect URLs containing information about originally requested URLs.

Recommendations For squidGuard version 1.4, consider restricting access to long URLs as a temporary workaround until a patch is available. Additionally, review and adjust buffer size configurations to prevent overflows.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2009-3826

DSA-2040-1

OPENSUSE-SU-2024:10562-1

Produtos afetados

Squid

Squidguard

Referências · 19

• http://vupen.com/english/advisories/2009/3013 · Aviso do Fabricante
• http://securityfocus.com/bid/36800 · Correção
• http://secunia.com/advisories/37107 · Aviso do Fabricante
• http://securityfocus.com/archive/1/507440/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/53922 · Nota
• https://osv.dev/vulnerability/CVE-2009-3826 · Aviso do Fabricante
• http://debian.org/security/2010/dsa-2040 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2009-3700 · Nota
• http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html · Aviso do Fabricante
• http://osvdb.org/59164 · Nota
• http://squidguard.org/Downloads/Patches/1.4/Readme.Patch-20091019 · Aviso do Fabricante
• https://osv.dev/vulnerability/openSUSE-SU-2024:10562-1 · Aviso do Fabricante
• http://securitytracker.com/id?1023079 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-3826 · Nota de Segurança
• http://secunia.com/advisories/39679 · Nota