Detections
Analytics
Squid 3.2.x < 3.2.13 / 3.3.x < 3.3.8 Port Handling DoS
medium Nessus Plugin ID 69042
Language:
Synopsis
The remote proxy server is affected by a denial of service vulnerability.Description
According to its banner, the version of Squid running on the remote host is 3.2.x prior to 3.2.13 or 3.3.x prior to 3.3.8. It is, therefore, affected by a denial of service vulnerability. The vulnerability exists when handling a port number in the host header of a specially crafted HTTP Request.Note that Nessus has relied only on the version in the proxy server's banner, which is not updated by the patch that the project has released to address this issue. If this patch has been applied properly and the service has been restarted, consider this to be a false positive.
Solution
Either upgrade to Squid version 3.2.13 / 3.3.8 or later, or apply the vendor-supplied patch.See Also
Plugin Details
Severity: Medium
ID: 69042
File Name: squid_3_2_13.nasl
Version: 1.7
Type: remote
Family: Firewalls
Published: 7/24/2013
Updated: 11/15/2018
Configuration: Enable paranoid mode
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 4.4
CVSS v2
Risk Factor: Medium
Base Score: 5
Temporal Score: 3.9
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P
Vulnerability Information
CPE: cpe:/a:squid-cache:squid
Required KB Items: Settings/ParanoidReport, www/squid
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 7/13/2013
Vulnerability Publication Date: 7/13/2013
Reference Information
CVE: CVE-2013-4123