Squid WCCP Forged Message DoS Vulnerability (SQUID-2005:2)

From this webpage screenshot, the following key vulnerability information can be extracted: Advisory ID: - SQUID-2005:2 Date: - January 15, 2005 Summary: - Denial of service by forged WCCP messages Affected versions: - All versions up to and including 2.5.STABLE7 Problem Description: - A bug exists in the code that parses WCCP messages. An attacker that sends a malformed WCCP message with a spoofed source address matching Squid's "home router" can crash Squid. Severity: - Important as it allows remote attackers to crash Squid. However, the bug is exploitable only if Squid is configured to send WCCP messages to a router and if the attacker can send UDP messages with a forged source address. Updated Packages: - A patch is available and can be found from the provided link. Determining if your version is vulnerable: - Your installation is vulnerable if: 1. Squid is configured to send WCCP messages to a router. 2. UDP messages with spoofed source addresses can reach Squid. Workarounds: - If WCCP is essential, disabling it by commenting out the directive in . - Compiling Squid without WCCP. - Enabling unicast reverse path forwarding on routers and switches to prevent spoofed packets. Contact details for the Squid project: - For installation/upgrade support: Binary package vendor or mailing list for installations from original Squid sources. Bug reporting mailing list or bugzilla database for non-security-related bugs. Credits: - This vulnerability was reported by infamous41md.

Goal Reached Thanks to every supporter — we hit 100%!

Squid WCCP Forged Message DoS Vulnerability (SQUID-2005:2)