Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Gentoo GLSA-200501-25: Advisory on Normal Squid DoS Vulnerability

gentoo
Calendar Grey January 16, 2005
Scroller Gentoo
Recent Squid weaknesses discovered on Gentoo can result in denial of service or execution of unauthorized code; upgrading is recommended. Further information available here.
Squid contains vulnerabilities in the the code handling NTLM (NT Lan Manager), Gopher to HTML and WCCP (Web Cache Communication Protocol) which could lead to denial of service and ...

Summary

Gentoo Linux Security Advisory GLSA 200501-25 https://security.gentoo.org/ Severity: Normal Title: Squid: Multiple vulnerabilities Date: January 16, 2005 Bugs: #77934, #77521 ID: 200501-25

Synopsis ======= Squid contains vulnerabilities in the the code handling NTLM (NT Lan Manager), Gopher to HTML and WCCP (Web Cache Communication Protocol) which could lead to denial of service and arbitrary code execution.
Background ========= Squid is a full-featured Web proxy cache designed to run on Unix systems. It supports proxying and caching of HTTP, FTP, and other URLs, as well as SSL support, cache hierarchies, transparent caching, access control lists and many other features.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffec...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service gentoo arbitrary code execution squid normal severity NTLM

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory denial of service gentoo arbitrary code execution squid normal severity NTLM

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround