Lucene search

K
freebsdFreeBSD7E97B288-C7CA-11D9-9E1E-C296AC722CB3
HistoryMay 11, 2005 - 12:00 a.m.

squid -- DNS lookup spoofing vulnerability

2005-05-1100:00:00
vuxml.freebsd.org
12

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

0.331 Low

EPSS

Percentile

97.0%

The squid patches page notes:

Malicious users may spoof DNS lookups if the DNS client UDP port
(random, assigned by OS as startup) is unfiltered and your network
is not protected from IP spoofing.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchsquid< 2.5.10UNKNOWN

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

0.331 Low

EPSS

Percentile

97.0%