J-Security Center

Title: Squid Web Proxy Authentication Failure Vulnerability

Severity: HIGH

Description:

There is a vulnerability present in certain versions of the Squid Web Proxy Cache developed by the National Science Foundation. This problem is only in effect when users of the cache are using an external authenticator.

The following is quoted from the original Bugtraq posting on this issue. This message in its entirety is available in the 'Credits' section of this vulnerability.

"After decoding the base64 encoded "user:password" pair given by the client, squid doesn't strip out any '\n' or '\r' found in the resulting string. Given such a string, any external authenticator will receive two lines instead of one, and most probably send two results. Now, any subsequent authentication exchange will has its answer shifted by one. Therefore, a malicious user can gain access to sites he or she should not have access to."

Affected Products:

  • National Science Foundation Squid Web Proxy 1.0.0
  • National Science Foundation Squid Web Proxy 1.0.0NOVM
  • National Science Foundation Squid Web Proxy 1.1.0
  • National Science Foundation Squid Web Proxy 2.1.0
  • National Science Foundation Squid Web Proxy 2.2.0

References:

Juniper Networks provides this content via a wide variety of sources and production methods. If notified of errors or omissions in the content of this page, Juniper Networks, at its discretion, will modify or remove the page or leave the content as is, depending on various factors including but not limited to the reputation and authority of the party providing the notification. Please use the contact information displayed elsewhere on this page to report any errors or omissions regarding the content on this page.