Detections
Analytics

Squid < 2.5 STABLE11 NTLM Authentication Header DoS

low Log Correlation Engine Plugin ID 801047

Synopsis

The remote proxy is vulnerable to a DoS attack.

Description

The remote squid caching proxy, according to its version number, is vulnerable to an attack where an attacker can disable the Squid proxy by sending a malformed NTLM request. Successful exploitation leads to a loss of availability.

Solution

Upgrade to version 2.5 STABLE11 or higher.

See Also

http://.squid-cache.org/Versions/v2/2.5/bugs

Plugin Details

Severity: Low

ID: 801047

Family: Web Servers

Reference Information

CVE: CVE-2005-2917

BID: 14977