National Science Foundation Squid Proxy Internet Access Control Bypass Vulnerability

Bugtraq ID:	10315
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	May 10 2004 12:00AM
Updated:	May 10 2004 12:00AM
Credit:	Disclosure of this issue is credited to Nuno Costa <[email protected]>.
Vulnerable:	National Science Foundation Squid Web Proxy 2.3 STABLE5 + MandrakeSoft Corporate Server 1.0.1 + MandrakeSoft Single Network Firewall 7.2 + Mandriva Linux Mandrake 8.0 ppc + Mandriva Linux Mandrake 8.0 + Mandriva Linux Mandrake 7.2 + Mandriva Linux Mandrake 7.1 + Trustix Secure Linux 1.5 + Trustix Secure Linux 1.2 + Trustix Secure Linux 1.1
Not Vulnerable:

National Science Foundation Squid Proxy Internet Access Control Bypass Vulnerability

Squid proxy has been reported to be affected by an Internet access control bypass vulnerability. This issue is caused by a failure of the application to properly handle access controls when evaluating malformed URI requests.

This issue is reported to affect version 2.3.STABLE5 of the software, it is likely however that other versions are also affected.

This issue would allow users that are restricted from accessing Internet-based resources to access arbitrary web sites.

National Science Foundation Squid Proxy Internet Access Control Bypass Vulnerability

No exploit is required to leverage this issue. The following proof of concept URI request has been provided:

http://@@website_allowed.pt@restricted_internet_resource.html

National Science Foundation Squid Proxy Internet Access Control Bypass Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

National Science Foundation Squid Proxy Internet Access Control Bypass Vulnerability

References:

• Squid Web Proxy Cache Homepage (Squid)
  
• a litle bypass with IE (Nuno Costa )