Detections
Analytics

Squid < 2.6.STABLE12 src/client_side.c clientProcessRequest() function TRACE Request DoS

medium Nessus Plugin ID 24873

Language:

Synopsis

The remote proxy server is vulnerable to a denial of service attack.

Description

A vulnerability in TRACE request processing has been reported in Squid, which can be exploited by malicious people to cause a denial of service.

Solution

Upgrade to squid 2.6.STABLE12 or later.

See Also

http://www.squid-cache.org/Advisories/SQUID-2007_1.txt

Plugin Details

Severity: Medium

ID: 24873

File Name: squid_2612.nasl

Version: 1.21

Type: remote

Family: Firewalls

Published: 3/23/2007

Updated: 6/12/2020

Configuration: Enable paranoid mode

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.6

CVSS v2

Risk Factor: Medium

Base Score: 5

Temporal Score: 3.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Information

CPE: cpe:/a:squid-cache:squid

Required KB Items: Settings/ParanoidReport

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 3/20/2007

Reference Information

CVE: CVE-2007-1560

BID: 23085