Detections
Analytics
Squid < 3.0STABLE24 HTCP Request Denial of Service
medium Log Correlation Engine Plugin ID 801037
Synopsis
The remote host is vulnerable to a Denial of Service (DoS) attack.Description
According to its banner, the version of Squid proxy caching server installed on the remote host is 2.x or 3.0.x earlier than 3.0.STABLE24. Such versions are potentially affected by a denial-of-service vulnerability due to incorrect processing of specially crafted HTCP packets.Solution
Either upgrade to Squid version 3.0.STABLE24 or later, or apply the patch referenced in the project's advisory above.See Also
http://.squid-cache.org/Versions/v2/2.7/changesets/12600.patch
http://.squid-cache.org/Versions/v3/3.0/changesets/3.0-ADV-2010_2.patch
Plugin Details
Severity: Medium
ID: 801037
Family: Web Servers
Published: 2/12/2010
Nessus ID: 45591
Vulnerability Information
Patch Publication Date: 2/12/2010
Vulnerability Publication Date: 2/12/2010
Reference Information
CVE: CVE-2010-0639
BID: 38212