Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
HTTP:PROXY:SQUID-FTP |
|---|---|
Severity |
Minor |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Squid Proxy FTP URI Processing Denial of Service |
Release Date |
2007/02/20 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
HTTP: Squid Proxy FTP URI Processing Denial of Service
This signature detects attempts to exploit a known vulnerability against Squid Proxy. A successful attack can result in a denial-of-service condition.
Extended Description
Squid is prone to a remote denial-of-service vulnerability because the proxy server fails to handle certain FTP requests. Successfully exploiting this issue allows remote attackers to crash affected proxy applications, denying futher service to legitimate users. Squid versions from 2.5.STABLE11 to 2.6.STABLE6 are vulnerable to this issue.
Affected Products
- Gentoo linux
- Mandriva corporate_server 3.0.0
- Mandriva corporate_server 3.0.0 X86 64
- Mandriva corporate_server 4.0
- Mandriva corporate_server 4.0.0 X86 64
- Mandriva linux_mandrake 2006.0.0
- Mandriva linux_mandrake 2006.0.0 X86 64
- Mandriva linux_mandrake 2007.0
- Mandriva linux_mandrake 2007.0 X86 64
- Mandriva multi_network_firewall 2.0.0
- Novell linux_desktop 9
- Novell open_enterprise_server_(oes)
- Red_hat fedora Core5
- Squid web_proxy_cache 2.5.STABLE11
- Squid web_proxy_cache 2.5.STABLE12
- Squid web_proxy_cache 2.5.STABLE13
- Squid web_proxy_cache 2.5.STABLE14
- Squid web_proxy_cache 2.6.STABLE1
- Squid web_proxy_cache 2.6.STABLE2
- Squid web_proxy_cache 2.6.STABLE3
- Squid web_proxy_cache 2.6.STABLE4
- Squid web_proxy_cache 2.6.STABLE5
- Squid web_proxy_cache 2.6.STABLE6
- Suse linux 10.0
- Suse linux 10.1
- Suse linux 9.3
- Suse suse_linux_enterprise_desktop 10
- Suse suse_linux_enterprise_server 10
- Suse suse_linux_enterprise_server 9
- Trustix operating_system_enterprise_server 2.0
- Trustix secure_linux 2.2.0
- Trustix secure_linux 3.0.0
- Turbolinux appliance_server 1.0.0 Hosting Edition
- Turbolinux appliance_server 1.0.0 Workgroup Edition
- Turbolinux appliance_server 2.0
- Turbolinux appliance_server_hosting_edition 1.0.0
- Turbolinux appliance_server_workgroup_edition 1.0.0
- Turbolinux turbolinux_server 10.0.0
- Turbolinux turbolinux_server 10.0.0 X64
- Turbolinux turbolinux_server 8.0.0
- Ubuntu ubuntu_linux 6.06 LTS Amd64
- Ubuntu ubuntu_linux 6.06 LTS I386
- Ubuntu ubuntu_linux 6.06 LTS Powerpc
- Ubuntu ubuntu_linux 6.06 LTS Sparc
- Ubuntu ubuntu_linux 6.10 Amd64
- Ubuntu ubuntu_linux 6.10 I386
- Ubuntu ubuntu_linux 6.10 Powerpc
- Ubuntu ubuntu_linux 6.10 Sparc
References