Squid proxy server 2.4 and earlier allows remote attackers to cause a denial of service (crash) via a mkdir-only FTP PUT request.

Vladimir Ivaschenko found a problem in squid (a popular proxy cache).
 He discovered that there was a flaw in the code to handle FTP PUT  commands: when a mkdir-only request was done squid would detect an  internal error and exit. Since squid is configured to restart itself  on problems this is not a big problem.

The remote Squid caching proxy may be disabled remotely by any user by sending it a malformed 'mkdir-only' PUT request, denying access to legitimate users.

Vladimir Ivaschenko found a problem in the squid proxy server. Certain FTP requests could cause the squid daemon to abort, making it unavailable for a few seconds. If enough of these requests are sent in a short period of time, the squid daemon will not restart itself.

A problem exists in the way the remote Squid proxy server handles a special 'mkdir-only' PUT request, and causes denial of service to the proxy server.

An attacker may use this flaw to prevent your LAN users from accessing the web.

ID	Name	Product	Family	Severity
14914	Debian DSA-077-1 : squid - remote DoS	Nessus	Debian Local Security Checks	medium
1524	Squid < 2.4.STABLE2 mkdir-only PUT Request DoS	Nessus Network Monitor	Web Servers	medium
13901	Mandrake Linux Security Advisory : squid (MDKSA-2001:088)	Nessus	Mandriva Local Security Checks	medium
10768	Squid mkdir-only PUT Request Remote DoS	Nessus	Firewalls	medium

Detections

Analytics

CVE-2001-0843

high

Tenable Plugins

medium

medium

medium

medium