Security Update: [CSSA-2003-SCO.9] OpenServer 5.0.5 OpenServer 5.0.6 : Buffer overflows and other security vulnerabilities in Squid

security_at_sco.com
Date: 05/27/03

  • Next message: Godwin Stewart: "Re: NII Advisory - Buffer Overflow in Analogx Proxy" 
    To: bugtraq@securityfocus.com, announce@lists.caldera.com, scoannmod@xenitec.on.ca
Date: Tue, 27 May 2003 11:20:23 -0700

    To: bugtraq@securityfocus.com announce@lists.caldera.com scoannmod@xenitec.on.ca

    ______________________________________________________________________________

                            SCO Security Advisory

    Subject: OpenServer 5.0.5 OpenServer 5.0.6 : Buffer overflows and other security vulnerabilities in Squid
    Advisory number: CSSA-2003-SCO.9
    Issue date: 2003 May 27
    Cross reference:
    ______________________________________________________________________________

    1. Problem Description

             Vulnerability in Squid related to proxy authentication
             credentials may allow remote web sites to obtain the user's
             proxy login and password.

             FTP proxy in Squid does not compare the IP addresses of
             control and data connections with the FTP server, which
             allows remote attackers to bypass firewall rules or spoof FTP
             server responses.

             Buffer overflows in Squid allow remote attackers to cause a
             denial of service (crash) and possibly execute arbitrary code
             (1) via the MSNT auth helper (msnt_auth) when using denyusers
             or allowusers files, (2) via the gopher client, or (3) via
             the FTP server directory listing parser when HTML output is
             generated.

    2. Vulnerable Supported Versions

            System Binaries
            ----------------------------------------------------------------------
            OpenServer 5.0.5 Squid distribution
            OpenServer 5.0.6 Squid distribution

    3. Solution

            The proper solution is to install the latest packages.

    4. OpenServer 5.0.5

            4.1 Location of Fixed Binaries

            ftp://ftp.sco.com/pub/updates/OpenServer/CSSA-2003-SCO.9

            4.2 Verification

            MD5 (VOL.000.000) = a4abc782d87415df7369a0483e3b1554
            MD5 (VOL.000.001) = d91c192ac5ec45fe609d5a58fdf736b5
            MD5 (VOL.000.002) = af55795c6ebbe9012c9eb5d8b2f6e57a
            MD5 (VOL.000.003) = c5a74b7f6ab24a311b2fc24f01740ffe

            md5 is available for download from
                    ftp://ftp.sco.com/pub/security/tools

            4.3 Installing Fixed Binaries

            Upgrade the affected binaries with the following sequence:

            1) Download the VOL* files to the /tmp directory

            2) Run the custom command, specify an install from media
            images, and specify the /tmp directory as the location of
            the images.

    5. OpenServer 5.0.6

            5.1 Location of Fixed Binaries

            ftp://ftp.sco.com/pub/updates/OpenServer/CSSA-2003-SCO.9

            5.2 Verification

            MD5 (VOL.000.000) = a4abc782d87415df7369a0483e3b1554
            MD5 (VOL.000.001) = d91c192ac5ec45fe609d5a58fdf736b5
            MD5 (VOL.000.002) = af55795c6ebbe9012c9eb5d8b2f6e57a
            MD5 (VOL.000.003) = c5a74b7f6ab24a311b2fc24f01740ffe

            md5 is available for download from
                    ftp://ftp.sco.com/pub/security/tools

            5.3 Installing Fixed Binaries

            Upgrade the affected binaries with the following sequence:

            1) Download the VOL* files to the /tmp directory

            2) Run the custom command, specify an install from media
            images, and specify the /tmp directory as the location of
            the images.

    6. References

            Specific references for this advisory:

                    http://www.squid-cache.org/Advisories/SQUID-2002_3.txt
                    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0714
                    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2002-0713
                    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2002-0715

            SCO security resources:

                    http://www.sco.com/support/security/index.html

            This security fix closes SCO incidents sr866632, fz521515,
            erg501628.

    7. Disclaimer

            SCO is not responsible for the misuse of any of the information
            we provide on this website and/or through our security
            advisories. Our advisories are a service to our customers
            intended to promote secure installation and use of SCO
            products.

    8. Acknowledgements

            The Squid Team discovered and researched these vulnerabilities.

    ______________________________________________________________________________

  • Next message: Godwin Stewart: "Re: NII Advisory - Buffer Overflow in Analogx Proxy"

    Relevant Pages