PT-2012-3886 · Squid · Squid+1

CVE-2012-2213 · Publicado 2012-04-28 · Atualizado 2024-08-06

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Squid version 3.1.9

Description The issue allows remote attackers to bypass the access configuration for the CONNECT method by providing an arbitrary allowed hostname in the Host HTTP header. Note that this issue might not be reproducible due to the lack of a squid.conf file for a vulnerable system, and the observed behavior is consistent with a squid.conf file that was perhaps inadvertently designed to allow access based on a "req header Host" acl regex that matches www.uol.com.br.

Recommendations For Squid version 3.1.9, consider modifying the squid.conf file to restrict access based on the Host HTTP header to prevent bypassing the access configuration for the CONNECT method. As a temporary workaround, restrict the use of the CONNECT method until a proper configuration can be implemented.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2012-2213

Produtos afetados

Squid

Squid Cache

Referências · 9

• http://archives.neohapsis.com/archives/bugtraq/2012-04/0117.html · Nota
• http://archives.neohapsis.com/archives/bugtraq/2012-04/0165.html · Nota
• https://t.me/cvenotify/89501 · Publicação no Telegram
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2213 · Nota
• http://archives.neohapsis.com/archives/bugtraq/2012-04/0131.html · Nota
• http://archives.neohapsis.com/archives/bugtraq/2012-04/0163.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-2213 · Nota de Segurança
• http://archives.neohapsis.com/archives/bugtraq/2012-04/0140.html · Nota
• http://archives.neohapsis.com/archives/bugtraq/2012-04/0146.html · Nota