PT-2012-3886 · Squid · Squid+1

Published 2012-04-28 · Updated 2024-08-06 · CVE-2012-2213

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Squid version 3.1.9

Description The issue allows remote attackers to bypass the access configuration for the CONNECT method by providing an arbitrary allowed hostname in the Host HTTP header. Note that this issue might not be reproducible due to the lack of a squid.conf file for a vulnerable system, and the observed behavior is consistent with a squid.conf file that was perhaps inadvertently designed to allow access based on a "req header Host" acl regex that matches www.uol.com.br.

Recommendations For Squid version 3.1.9, consider modifying the squid.conf file to restrict access based on the Host HTTP header to prevent bypassing the access configuration for the CONNECT method. As a temporary workaround, restrict the use of the CONNECT method until a proper configuration can be implemented.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2012-2213

Affected Products

Squid

Squid Cache

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2012-2213 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2012-04/0117.html · Note
• http://archives.neohapsis.com/archives/bugtraq/2012-04/0165.html · Note
• https://t.me/cvenotify/89501 · Telegram Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2213 · Note
• http://archives.neohapsis.com/archives/bugtraq/2012-04/0131.html · Note
• http://archives.neohapsis.com/archives/bugtraq/2012-04/0163.html · Note
• http://archives.neohapsis.com/archives/bugtraq/2012-04/0140.html · Note
• http://archives.neohapsis.com/archives/bugtraq/2012-04/0146.html · Note