Test ID:	1.3.6.1.4.1.25623.1.0.703139
Category:	Debian Local Security Checks
Title:	Debian Security Advisory DSA 3139-1 (squid - security update)
Summary:	Matthew Daley discovered that squid,;a web proxy cache, does not properly perform input validation when parsing requests.;A remote attacker could use this flaw to mount a denial of service attack, by;sending specially crafted Range requests.
Description:	Summary: Matthew Daley discovered that squid, a web proxy cache, does not properly perform input validation when parsing requests. A remote attacker could use this flaw to mount a denial of service attack, by sending specially crafted Range requests. Affected Software/OS: squid on Debian Linux Solution: For the stable distribution (wheezy), this problem has been fixed in version 2.7.STABLE9-4.1+deb7u1. We recommend that you upgrade your squid packages. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2014-3609 BugTraq ID: 69453 http://www.securityfocus.com/bid/69453 Debian Security Information: DSA-3014 (Google Search) http://www.debian.org/security/2014/dsa-3014 Debian Security Information: DSA-3139 (Google Search) http://www.debian.org/security/2015/dsa-3139 RedHat Security Advisories: RHSA-2014:1147 http://rhn.redhat.com/errata/RHSA-2014-1147.html http://secunia.com/advisories/60179 http://secunia.com/advisories/60334 http://secunia.com/advisories/61320 http://secunia.com/advisories/61412 SuSE Security Announcement: SUSE-SU-2014:1140 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00025.html SuSE Security Announcement: openSUSE-SU-2014:1144 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-09/msg00029.html http://www.ubuntu.com/usn/USN-2327-1
Copyright	Copyright (c) 2015 Greenbone Networks GmbH http://greenbone.net

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.