Squid Web Proxy Cross-Site Scripting Vulnerability

Bugtraq ID:	3059
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 27 2000 12:00AM
Updated:	Oct 27 2000 12:00AM
Credit:	This vulnerability was originated submitted to the [email protected] mailing list by Lincoln Yeoh <[email protected]> on October 27th, 2001.
Vulnerable:	National Science Foundation Squid Web Proxy 2.4 PRE-STABLE National Science Foundation Squid Web Proxy 2.4 DEVEL4 National Science Foundation Squid Web Proxy 2.4 DEVEL2 National Science Foundation Squid Web Proxy 2.3 STABLE4 - Caldera OpenLinux Server 3.1 - Immunix Immunix OS 7.0 beta - Immunix Immunix OS 7.0 - Immunix Immunix OS 6.2 - MandrakeSoft Corporate Server 1.0.1 - MandrakeSoft Single Network Firewall 7.2 - Mandriva Linux Mandrake 8.0 - Mandriva Linux Mandrake 7.2 - Mandriva Linux Mandrake 7.1 + Redhat Linux 7.1 ia64 + Redhat Linux 7.1 i386 + Redhat Linux 7.1 alpha + Redhat Linux 7.0 i386 + Redhat Linux 7.0 alpha + Redhat Linux 6.2 sparc + Redhat Linux 6.2 i386 + Redhat Linux 6.2 alpha - SuSE Linux 7.3 - SuSE Linux 7.2 - SuSE Linux 7.1 x86 - SuSE Linux 7.1 sparc - SuSE Linux 7.1 ppc - SuSE Linux 7.1 alpha - SuSE Linux 7.0 sparc - SuSE Linux 7.0 ppc - SuSE Linux 7.0 alpha - SuSE Linux 7.0 - SuSE Linux 6.4 ppc - SuSE Linux 6.4 alpha - SuSE Linux 6.4 - Trustix Secure Linux 1.2 - Trustix Secure Linux 1.1 - Trustix Secure Linux 1.0 1
Not Vulnerable:	National Science Foundation Squid Web Proxy 2.4 STABLE1 + HP Secure OS software for Linux 1.0 + MandrakeSoft Corporate Server 1.0.1 + MandrakeSoft Single Network Firewall 7.2 + Mandriva Linux Mandrake 8.0 ppc + Mandriva Linux Mandrake 8.0 + Mandriva Linux Mandrake 7.2 + Mandriva Linux Mandrake 7.1 + Redhat Linux 7.2 - SuSE Linux 7.2 National Science Foundation Squid Web Proxy 2.4 PRE-STABLE2 National Science Foundation Squid Web Proxy 2.3 STABLE5 + MandrakeSoft Corporate Server 1.0.1 + MandrakeSoft Single Network Firewall 7.2 + Mandriva Linux Mandrake 8.0 ppc + Mandriva Linux Mandrake 8.0 + Mandriva Linux Mandrake 7.2 + Mandriva Linux Mandrake 7.1 + Trustix Secure Linux 1.5 + Trustix Secure Linux 1.2 + Trustix Secure Linux 1.1

Squid Web Proxy Cross-Site Scripting Vulnerability

Squid is a free client-side web proxy that retrieves cached web pages for quick browsers and a reduction in bandwidth consumption.

Malicious users can negatively affect Squid Web Proxy users by submitting links which contain arbitrary HTML or embedded script commands to websites. The malicious link must generate an error page, but the embedded script command or HTML will be executed within the actual error page. This opens Squid Web Proxy users to a variety of cross-site scripting attacks.

Squid Web Proxy Cross-Site Scripting Vulnerability

Lincoln Yeoh <[email protected]> provided these examples:

For example if a user visits the following url

http://www.dotcom.com/ <b>test</b>

The user will get an invalid url page with test in bold.

Or even more fun with:
http://www.somecompany.com/<img src="http://www.mysite.com/mylogo.gif">

You can actually get a working form in such an error message! Javascript too.

Squid Web Proxy Cross-Site Scripting Vulnerability

References:

• Squid Cache Home Page (National Science Foundation)