Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
HTTP:INVALID:DUPLICATE-HEADER |
|---|---|
Severity |
Minor |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
HTTP double header |
Release Date |
2005/11/07 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.4+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
HTTP: Invalid Duplicate Header
This anomaly triggers when it detects two consecutive HTTP headers in a request. Attackers can be attempting to trick the Web server into parsing the request incorrectly and producing an incorrect Web server state. This condition can indicate your system in under attack.
Extended Description
A remote unspecified vulnerability reportedly affects Squid Proxy. This issue is due to the application's failure to properly handle malformed HTTP headers. The impact of this issue is currently unknown. This BID will be updated when more information becomes available.
Affected Products
- Astaro security_linux 2.0.0 16
- Astaro security_linux 2.0.0 23
- Astaro security_linux 2.0.0 24
- Astaro security_linux 2.0.0 25
- Astaro security_linux 2.0.0 26
- Astaro security_linux 2.0.0 27
- Astaro security_linux 2.0.0 30
- Astaro security_linux 3.2.0 00
- Astaro security_linux 3.2.0 10
- Astaro security_linux 3.2.0 11
- Astaro security_linux 3.2.0 12
- Astaro security_linux 3.2.0 15
- Astaro security_linux 3.2.0 16
- Astaro security_linux 3.217.0
- Astaro security_linux 4.0.0 08
- Astaro security_linux 4.0.0 16
- Astaro security_linux 4.0.0 17
- Red_hat fedora Core1
- Red_hat fedora Core2
- Red_hat linux 7.3.0 I386
- Red_hat linux 9.0.0 I386
- Sgi propack 3.0.0
- Squid web_proxy_cache 2.5.0 .STABLE1
- Squid web_proxy_cache 2.5.0 .STABLE3
- Squid web_proxy_cache 2.5.0 .STABLE4
- Squid web_proxy_cache 2.5.0 .STABLE5
- Squid web_proxy_cache 2.5.0 .STABLE6
- Squid web_proxy_cache 2.5.0 .STABLE7
- Suse linux 8.0.0
- Suse linux 8.0.0 i386
- Suse linux 8.1.0
- Suse linux_personal 8.2.0
- Suse linux_personal 9.0.0
- Suse linux_personal 9.0.0 X86 64
- Suse linux_personal 9.1.0
- Suse linux_personal 9.2.0
- Turbolinux appliance_server_hosting_edition 1.0.0
- Turbolinux appliance_server_workgroup_edition 1.0.0
- Turbolinux turbolinux_server 10.0.0
- Turbolinux turbolinux_server 7.0.0
- Turbolinux turbolinux_server 8.0.0
- Turbolinux turbolinux_workstation 7.0.0
- Turbolinux turbolinux_workstation 8.0.0
References
- BugTraq: 12412
- CVE: CVE-2005-0174
- CVE: CVE-2005-1215
- URL: http://www.faqs.org/rfcs/rfc2616.html
- URL: http://www.w3.org/Protocols/rfc1945/rfc1945