バナーによると、リモートホストで実行しているSquidのバージョンは、2.5.STABLE8より前です。したがって、無効な形式のホスト名の不適切な処理により、情報漏洩の脆弱性による影響を受けます。認証されていないリモートの攻撃者がこの問題を悪用し、最近解放されたメモリの内容をエラーメッセージとして漏洩させる可能性があります。

Nessusはこの問題をテストしておらず、代わりにアプリケーションの自己報告されたバージョン番号にのみ依存しています。

According to its banner, the version of Squid running on the remote host is prior to 2.5.STABLE8. It is, therefore, affected by an information disclosure vulnerability due to improper handling of malformed host names. An unauthenticated, remote attacker can exploit this issue to disclose the contents of recently freed memory as error messages.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

根据其标题，远程主机上运行的 Squid 版本低于 2.5.STABLE8。因此，该主机受到一个信息泄露漏洞的影响，这是未正确处理畸形主机名称所致。未经身份验证的远程攻击者可利用此问题，泄露近期作为错误消息释放的内容。

请注意，Nessus 尚未测试此问题，而是只依靠应用程序自我报告的版本号来判断。

根據其橫幅，遠端主機上執行的 Squid 版本比 2.5.STABLE8 舊。因此會受到資訊洩漏弱點影響，這是應用程式不當處理格式錯誤的主機名稱所造成。未經驗證的遠端攻擊者可利用此問題，以錯誤訊息的方式洩露最近釋放的記憶體的內容。

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼。

An updated Squid package that fixes security issues is now available.

This update has been rated as having important security impact by the Red Hat Security Response Team.

Squid is a full-featured Web proxy cache.

A bug was found in the way Squid displays error messages. A remote attacker could submit a request containing an invalid hostname which would result in Squid displaying a previously used error message. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2004-2479 to this issue.

Two denial of service bugs were found in the way Squid handles malformed requests. A remote attacker could submit a specially crafted request to Squid that would cause the server to crash. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CVE-2005-2794 and CVE-2005-2796 to these issues.

Please note that CVE-2005-2796 does not affect Red Hat Enterprise Linux 2.1

Users of Squid should upgrade to this updated package that contains backported patches, and is not vulnerable to these issues.

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:766 advisory.

    Squid is a full-featured Web proxy cache.

    A bug was found in the way Squid displays error messages. A remote attacker     could submit a request containing an invalid hostname which would result in     Squid displaying a previously used error message. The Common     Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name     CAN-2004-2479 to this issue.

    Two denial of service bugs were found in the way Squid handles malformed     requests. A remote attacker could submit a specially crafted request to     Squid that would cause the server to crash. The Common Vulnerabilities and     Exposures project (cve.mitre.org) has assigned the names CAN-2005-2794 and     CAN-2005-2796 to these issues.

    Please note that CAN-2005-2796 does not affect Red Hat Enterprise Linux 2.1

    Users of Squid should upgrade to this updated package that contains     backported patches, and is not vulnerable to these issues.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host running a Squid proxy on this port.
There is a vulnerability in the remote version of this software that may allow an attacker to obtain sensitive information via URLs containing invalid hostnames that cause DNS operations to fail, which results in references to previously used error messages.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
15929	Squid < 2.5.STABLE8 無効な形式のホスト名エラーメッセージの情報漏洩	Nessus	Firewalls	2004/12/9	2018/7/30	medium
15929	Squid < 2.5.STABLE8 Malformed Host Name Error Message Information Disclosure	Nessus	Firewalls	2004/12/9	2018/7/30	medium
15929	Squid < 2.5.STABLE8 畸形主机名称错误消息信息泄露	Nessus	Firewalls	2004/12/9	2018/7/30	medium
15929	Squid < 2.5.STABLE8 格式錯誤的主機名稱錯誤訊息資訊洩漏	Nessus	Firewalls	2004/12/9	2018/7/30	medium
21855	CentOS 3 / 4 : squid (CESA-2005:766)	Nessus	CentOS Local Security Checks	2006/7/3	2021/1/4	medium
19713	RHEL 4 : squid (RHSA-2005:766)	Nessus	Red Hat Local Security Checks	2005/9/17	2024/11/4	high
2448	Squid 2.5.x < 2.5.STABLE8 Information Disclosure	Nessus Network Monitor	Web Servers	2004/10/12	2019/3/6	medium

检测

插件搜索

medium

medium

medium

medium

medium

high

medium