CVE-2015-5400: Medium severity red hat fedora vulnerability
Published Sep 28, 2015
·Updated
Squid before 3.5.6 does not properly handle CONNECT method peer responses when configured with cachepeer, which allows remote attackers to bypass intended restrictions and gain access to a backend proxy via a CONNECT request.
Affected Software
4 affected components
Fedoraproject Fedora=22
Debian Debian Linux=7.0
Debian Debian Linux=8.0
Squid-Cache Squid<=3.5.2
Event History
Sep 28, 2015
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-5400?
CVE-2015-5400 has a moderate severity level due to its ability to allow remote attackers to bypass restrictions.
2
How do I fix CVE-2015-5400?
To fix CVE-2015-5400, upgrade Squid to version 3.5.6 or later.
3
What systems are affected by CVE-2015-5400?
CVE-2015-5400 affects Squid versions up to 3.5.2 and specific versions of Fedora and Debian Linux.
4
What does CVE-2015-5400 allow attackers to do?
CVE-2015-5400 allows attackers to bypass intended restrictions and gain unauthorized access to a backend proxy.
5
Is CVE-2015-5400 a local or remote vulnerability?
CVE-2015-5400 is a remote vulnerability that can be exploited via a crafted CONNECT request.