Squid Proxy Gopher Remote Buffer Overflow Vulnerability
BID:49356
Info
Squid Proxy Gopher Remote Buffer Overflow Vulnerability
| Bugtraq ID: | 49356 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2011-3205 |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 29 2011 12:00AM |
| Updated: | May 07 2015 05:11PM |
| Credit: | Reported by the vendor |
| Vulnerable: |
Sun Solaris 11 Squid-Cache Squid 3.1.5 Squid-Cache Squid 3.1.4 Squid-Cache Squid 3.1 .5 Squid-Cache Squid 3.1 .4 Squid-Cache Squid 3.1 .15 Squid-Cache Squid 3.1.7 Squid-Cache Squid 3.1.6 Squid-Cache Squid 3.1.5.1 Squid-Cache Squid 3.1.3 Squid-Cache Squid 3.1.2 Squid-Cache Squid 3.1.1 Squid-Cache Squid 3.1.0.9 Squid-Cache Squid 3.1.0.8 Squid-Cache Squid 3.1.0.7 Squid-Cache Squid 3.1.0.6 Squid-Cache Squid 3.1.0.3 Squid-Cache Squid 3.1.0.2 Squid-Cache Squid 3.1.0.18 Squid-Cache Squid 3.1.0.17 Squid-Cache Squid 3.1.0.16 Squid-Cache Squid 3.1.0.14 Squid-Cache Squid 3.1.0.13 Squid-Cache Squid 3.1.0.12 Squid-Cache Squid 3.1.0.11 Squid-Cache Squid 3.1.0.10 Squid-Cache Squid 3.1.0.1 Squid-Cache Squid 3.1 Squid-Cache Squid 3.0.Stable9 Squid-Cache Squid 3.0.Stable8 Squid-Cache Squid 3.0.STABLE7 Squid-Cache Squid 3.0.STABLE6 Squid-Cache Squid 3.0.STABLE5 Squid-Cache Squid 3.0.STABLE4 Squid-Cache Squid 3.0.STABLE3 Squid-Cache Squid 3.0.STABLE25 Squid-Cache Squid 3.0.STABLE24 Squid-Cache Squid 3.0.STABLE23 Squid-Cache Squid 3.0.STABLE22 Squid-Cache Squid 3.0.STABLE21 Squid-Cache Squid 3.0.Stable20 Squid-Cache Squid 3.0.STABLE2 Squid-Cache Squid 3.0.Stable19 Squid-Cache Squid 3.0.Stable18 Squid-Cache Squid 3.0.STABLE17 Squid-Cache Squid 3.0.Stable16 Rc1 Squid-Cache Squid 3.0.STABLE16 Squid-Cache Squid 3.0.Stable15 Squid-Cache Squid 3.0.Stable14 Squid-Cache Squid 3.0.STABLE13 Squid-Cache Squid 3.0.STABLE12 Squid-Cache Squid 3.0.Stable11 Rc1 Squid-Cache Squid 3.0.Stable11 Squid-Cache Squid 3.0.Stable10 Squid-Cache Squid 3.0.STABLE1 Squid Web Proxy Cache 3.2.0.2 Squid Web Proxy Cache 3.2.0.1 Squid Squid Web Proxy Cache 3.2.0.10 Squid Squid Web Proxy 3.1.14 Squid Squid Web Proxy 3.1.13 Squid Squid Web Proxy 3.1 Squid Squid Web Proxy 3.0 Squid Squid Web Proxy 3.1 Squid Squid Web Proxy 3.0.STABLE26 Squid Squid Web Proxy 3.0.STABLE25 Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Server 6 Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 |
| Not Vulnerable: |
Squid Squid Web Proxy Cache 3.2.0.11 Squid Squid Web Proxy 3.1.15 |
Discussion
Squid Proxy Gopher Remote Buffer Overflow Vulnerability
Squid Proxy is prone remote buffer-overflow vulnerability affects the Gopher-to-HTML functionality.
An attacker can exploit this issue to execute arbitrary code with the privileges of the vulnerable application. Failed exploit attempts will result in a denial-of-service condition.
Squid Proxy is prone remote buffer-overflow vulnerability affects the Gopher-to-HTML functionality.
An attacker can exploit this issue to execute arbitrary code with the privileges of the vulnerable application. Failed exploit attempts will result in a denial-of-service condition.
Exploit / POC
Squid Proxy Gopher Remote Buffer Overflow Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]
Currently we are not aware of any working exploits. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]
Solution / Fix
Squid Proxy Gopher Remote Buffer Overflow Vulnerability
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
Squid Proxy Gopher Remote Buffer Overflow Vulnerability
References:
References: