Signature Detail
Short Name |
HTTP:PROXY:SQUID-OVERSIZE-HDR |
|---|---|
Severity |
Medium |
Recommended |
No |
Category |
HTTP |
Keywords |
Squid Oversized Reply Header Handling |
Release Date |
2005/02/15 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Squid Oversized Reply Header Handling
A known vulnerability exists in the way the Squid Web proxy/cache parses a overly large HTTP reply header. An oversized HTTP reply header could trigger unexpected behavior on the vulnerable Squid server. This flaw cannot be used to exploit the Squid proxy, however it can be used to attack a proxy client.
Extended Description
A remote unspecified vulnerability reportedly affects Squid Proxy. This issue is due to the application's failure to properly handle malformed HTTP headers. The impact of this issue is currently unknown. This BID will be updated when more information becomes available.
Affected Products
- Astaro Security Linux 2.0.0 16
- Astaro Security Linux 2.0.0 23
- Astaro Security Linux 2.0.0 24
- Astaro Security Linux 2.0.0 25
- Astaro Security Linux 2.0.0 26
- Astaro Security Linux 2.0.0 27
- Astaro Security Linux 2.0.0 30
- Astaro Security Linux 3.2.0 00
- Astaro Security Linux 3.2.0 10
- Astaro Security Linux 3.2.0 11
- Astaro Security Linux 3.2.0 12
- Astaro Security Linux 3.2.0 15
- Astaro Security Linux 3.2.0 16
- Astaro Security Linux 3.217.0
- Astaro Security Linux 4.0.0 08
- Astaro Security Linux 4.0.0 16
- Astaro Security Linux 4.0.0 17
- Red Hat Fedora Core1
- Red Hat Fedora Core2
- Red Hat Linux 7.3.0 I386
- Red Hat Linux 9.0.0 I386
- SGI ProPack 3.0.0
- Squid Web Proxy Cache 2.5.0 .STABLE1
- Squid Web Proxy Cache 2.5.0 .STABLE3
- Squid Web Proxy Cache 2.5.0 .STABLE4
- Squid Web Proxy Cache 2.5.0 .STABLE5
- Squid Web Proxy Cache 2.5.0 .STABLE6
- Squid Web Proxy Cache 2.5.0 .STABLE7
- SuSE Linux 8.0.0
- SuSE Linux 8.0.0 i386
- SuSE Linux 8.1.0
- SuSE Linux Personal 8.2.0
- SuSE Linux Personal 9.0.0
- SuSE Linux Personal 9.0.0 X86 64
- SuSE Linux Personal 9.1.0
- SuSE Linux Personal 9.2.0
- Turbolinux Appliance Server Hosting Edition 1.0.0
- Turbolinux Appliance Server Workgroup Edition 1.0.0
- Turbolinux Turbolinux Server 10.0.0
- Turbolinux Turbolinux Server 7.0.0
- Turbolinux Turbolinux Server 8.0.0
- Turbolinux Turbolinux Workstation 7.0.0
- Turbolinux Turbolinux Workstation 8.0.0
References