Signature Detail
Short Name |
HTTP:PROXY:SQUID-FTP |
|---|---|
Severity |
Medium |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Squid Proxy FTP URI Processing Denial of Service |
Release Date |
2007/02/20 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Squid Proxy FTP URI Processing Denial of Service
This signature detects attempts to exploit a known vulnerability against Squid Proxy. A successful attack can result in a denial-of-service condition.
Extended Description
Squid is prone to a remote denial-of-service vulnerability because the proxy server fails to handle certain FTP requests. Successfully exploiting this issue allows remote attackers to crash affected proxy applications, denying futher service to legitimate users. Squid versions from 2.5.STABLE11 to 2.6.STABLE6 are vulnerable to this issue.
Affected Products
- Gentoo Linux
- Mandriva Corporate Server 3.0.0
- Mandriva Corporate Server 3.0.0 X86 64
- Mandriva Corporate Server 4.0
- Mandriva Corporate Server 4.0.0 X86 64
- Mandriva Linux Mandrake 2006.0.0
- Mandriva Linux Mandrake 2006.0.0 X86 64
- Mandriva Linux Mandrake 2007.0
- Mandriva Linux Mandrake 2007.0 X86 64
- Mandriva Multi Network Firewall 2.0.0
- Novell Linux Desktop 9
- Novell Open Enterprise Server (OES)
- Red Hat Fedora Core5
- Squid Web Proxy Cache 2.5.STABLE11
- Squid Web Proxy Cache 2.5.STABLE12
- Squid Web Proxy Cache 2.5.STABLE13
- Squid Web Proxy Cache 2.5.STABLE14
- Squid Web Proxy Cache 2.6.STABLE1
- Squid Web Proxy Cache 2.6.STABLE2
- Squid Web Proxy Cache 2.6.STABLE3
- Squid Web Proxy Cache 2.6.STABLE4
- Squid Web Proxy Cache 2.6.STABLE5
- Squid Web Proxy Cache 2.6.STABLE6
- SuSE Linux 10.0
- SuSE Linux 10.1
- SuSE Linux 9.3
- SuSE SUSE Linux Enterprise Desktop 10
- SuSE SUSE Linux Enterprise Server 10
- SuSE SUSE Linux Enterprise Server 9
- Trustix Operating System Enterprise Server 2.0
- Trustix Secure Linux 2.2.0
- Trustix Secure Linux 3.0.0
- Turbolinux Appliance Server 1.0.0 Hosting Edition
- Turbolinux Appliance Server 1.0.0 Workgroup Edition
- Turbolinux Appliance Server 2.0
- Turbolinux Appliance Server Hosting Edition 1.0.0
- Turbolinux Appliance Server Workgroup Edition 1.0.0
- Turbolinux Turbolinux Server 10.0.0
- Turbolinux Turbolinux Server 10.0.0 X64
- Turbolinux Turbolinux Server 8.0.0
- Ubuntu Ubuntu Linux 6.06 LTS Amd64
- Ubuntu Ubuntu Linux 6.06 LTS I386
- Ubuntu Ubuntu Linux 6.06 LTS Powerpc
- Ubuntu Ubuntu Linux 6.06 LTS Sparc
- Ubuntu Ubuntu Linux 6.10 Amd64
- Ubuntu Ubuntu Linux 6.10 I386
- Ubuntu Ubuntu Linux 6.10 Powerpc
- Ubuntu Ubuntu Linux 6.10 Sparc
References