Signature Detail
Short Name |
HTTP:INVALID:DUPLICATE-HEADER |
|---|---|
Severity |
Medium |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
HTTP double header |
Release Date |
2005/11/07 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.4+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Invalid Duplicate Header
This anomaly triggers when it detects two consecutive HTTP headers in a request. Attackers can be attempting to trick the Web server into parsing the request incorrectly and producing an incorrect Web server state. This condition can indicate your system in under attack.
Extended Description
A remote unspecified vulnerability reportedly affects Squid Proxy. This issue is due to the application's failure to properly handle malformed HTTP headers. The impact of this issue is currently unknown. This BID will be updated when more information becomes available.
Affected Products
- Astaro Security Linux 2.0.0 16
- Astaro Security Linux 2.0.0 23
- Astaro Security Linux 2.0.0 24
- Astaro Security Linux 2.0.0 25
- Astaro Security Linux 2.0.0 26
- Astaro Security Linux 2.0.0 27
- Astaro Security Linux 2.0.0 30
- Astaro Security Linux 3.2.0 00
- Astaro Security Linux 3.2.0 10
- Astaro Security Linux 3.2.0 11
- Astaro Security Linux 3.2.0 12
- Astaro Security Linux 3.2.0 15
- Astaro Security Linux 3.2.0 16
- Astaro Security Linux 3.217.0
- Astaro Security Linux 4.0.0 08
- Astaro Security Linux 4.0.0 16
- Astaro Security Linux 4.0.0 17
- Red Hat Fedora Core1
- Red Hat Fedora Core2
- Red Hat Linux 7.3.0 I386
- Red Hat Linux 9.0.0 I386
- SGI ProPack 3.0.0
- Squid Web Proxy Cache 2.5.0 .STABLE1
- Squid Web Proxy Cache 2.5.0 .STABLE3
- Squid Web Proxy Cache 2.5.0 .STABLE4
- Squid Web Proxy Cache 2.5.0 .STABLE5
- Squid Web Proxy Cache 2.5.0 .STABLE6
- Squid Web Proxy Cache 2.5.0 .STABLE7
- SuSE Linux 8.0.0
- SuSE Linux 8.0.0 i386
- SuSE Linux 8.1.0
- SuSE Linux Personal 8.2.0
- SuSE Linux Personal 9.0.0
- SuSE Linux Personal 9.0.0 X86 64
- SuSE Linux Personal 9.1.0
- SuSE Linux Personal 9.2.0
- Turbolinux Appliance Server Hosting Edition 1.0.0
- Turbolinux Appliance Server Workgroup Edition 1.0.0
- Turbolinux Turbolinux Server 10.0.0
- Turbolinux Turbolinux Server 7.0.0
- Turbolinux Turbolinux Server 8.0.0
- Turbolinux Turbolinux Workstation 7.0.0
- Turbolinux Turbolinux Workstation 8.0.0
References
- BugTraq: 12412
- CVE: CVE-2005-1215
- CVE: CVE-2005-0174
- URL: http://www.faqs.org/rfcs/rfc2616.html
- URL: http://www.w3.org/Protocols/rfc1945/rfc1945