Detections
Analytics

Squid < 2.5 STABLE11 NTLM Authentication Header DoS

low Log Correlation Engine Plugin ID 801047

Synopsis

The remote proxy is vulnerable to a DoS attack.

Description

The remote squid caching proxy, according to its version number, is vulnerable to an attack where an attacker can disable the Squid proxy by sending a malformed NTLM request. Successful exploitation leads to a loss of availability.

Solution

Upgrade to version 2.5 STABLE11 or higher.

See Also

http://.squid-cache.org/Versions/v2/2.5/bugs

Plugin Details

Severity: Low

ID: 801047

Family: Web Servers

Risk Information

CVSS v2

Risk Factor: Medium

Base Score: 5.4

Temporal Score: 4

Vector: CVSS2#AV:N/AC:H/Au:N/C:N/I:N/A:C

Reference Information

CVE: CVE-2005-2917

BID: 14977