Red Hat Bugzilla – Bug 166522
CAN-2004-2480 squid access control bypass
Last modified: 2007-11-30 17:07:19 EST
This issue was discovered by Nuno Costa:
im not a expert in this area, but i work in a intranet that haves the
Squid/2.3.STABLE5 filtring all access's to the internet..
so i don't have access to the internet directaly, but i know that this proxy
allow access to especific web sites.. so, in the past if i us this:
http://urlwebsite_allowed.pt -> the vuln that is already discovered... i have
access to the website that i want...
but in this days, this vuln is now fixed so...
in my test's i found this way to pass this proxy, using:
http://website_allowed.ptmy_url -> now i have access...
using url.pt i can bypass the proxy and access the internet, i don't know how
faur, this could go!!
so i don't know if this is a bug from IE or just a simple bug from Squid.. ???
can anyone tell what we have in hands ?
This issue should also affect RHEL2.1 and RHEL3.
It was reported against 2.3 version and it seems to affect only this version. I
can't reproduce it on 2.4 or 2.5 version, I'm going to investigate it more...
There is a bit more information and more links in the CVE id:
I spent some time yesterday looking for this issue in upstream, but didn't find
much. If it was fixed it was done in a non public manner.
I went trough it too. It seems to me that this bug disappeared when upstream
switched/rewrited code from 2.3 to 2.4, I spent today googling/searching and I
haven't found anything relevant either. I wrote to original reporter and I'm
going to test the archaic 2.3 version...
Unable to reproduce on the latest RHEL4, RHEL3, RHEL2.1, FC4 and FC3 + old squid
2.3.STABLE5. I tested it with Mozila/Firefox/IE...
The original reporter hasn't replied and I can't reproduce it, so I'm closing it
as WORKSFORME. Please reopen if you find more info...