Signature Detail
Short Name |
HTTP:PROXY:SQUID-STRLISTGETITEM |
|---|---|
Severity |
Medium |
Recommended |
No |
Category |
HTTP |
Keywords |
Squid strListGetItem Denial of Service |
Release Date |
2010/09/30 |
Update Number |
1783 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Squid strListGetItem Denial of Service
This signature detects attempts to exploit a known vulnerability against Squid Proxy. A successful attack can result in a denial-of-service condition.
Extended Description
Squid is prone to a remote denial-of-service vulnerability because the proxy server fails to properly parse certain external authentication headers that contain comma delimiters. Successfully exploiting this issue allows remote attackers to trigger an infinite loop and consume system resources, denying further service to legitimate users.
Affected Products
- Debian Linux 4.0
- Debian Linux 4.0 Alpha
- Debian Linux 4.0 Amd64
- Debian Linux 4.0 Arm
- Debian Linux 4.0 Armel
- Debian Linux 4.0 Hppa
- Debian Linux 4.0 Ia-32
- Debian Linux 4.0 Ia-64
- Debian Linux 4.0 M68k
- Debian Linux 4.0 Mips
- Debian Linux 4.0 Mipsel
- Debian Linux 4.0 Powerpc
- Debian Linux 4.0 S/390
- Debian Linux 4.0 Sparc
- Debian Linux 5.0
- Debian Linux 5.0 Alpha
- Debian Linux 5.0 Amd64
- Debian Linux 5.0 Arm
- Debian Linux 5.0 Armel
- Debian Linux 5.0 Hppa
- Debian Linux 5.0 Ia-32
- Debian Linux 5.0 Ia-64
- Debian Linux 5.0 M68k
- Debian Linux 5.0 Mips
- Debian Linux 5.0 Mipsel
- Debian Linux 5.0 Powerpc
- Debian Linux 5.0 S/390
- Debian Linux 5.0 Sparc
- Gentoo Linux
- Mandriva Corporate Server 3.0.0
- Mandriva Corporate Server 3.0.0 X86 64
- Mandriva Corporate Server 4.0
- Mandriva Corporate Server 4.0.0 X86 64
- Mandriva Linux Mandrake 2008.0
- Mandriva Linux Mandrake 2008.0 X86 64
- Mandriva Multi Network Firewall 2.0.0
- Red Hat Enterprise Linux 5 Server
- Red Hat Enterprise Linux Desktop Workstation 5 Client
- Squid Web Proxy Cache 2.6
- Squid Web Proxy Cache 2.6.STABLE1
- Squid Web Proxy Cache 2.6.STABLE12
- Squid Web Proxy Cache 2.6.STABLE13
- Squid Web Proxy Cache 2.6.STABLE14
- Squid Web Proxy Cache 2.6.STABLE15
- Squid Web Proxy Cache 2.6.STABLE16
- Squid Web Proxy Cache 2.6.STABLE17
- Squid Web Proxy Cache 2.6.STABLE18
- Squid Web Proxy Cache 2.6.STABLE2
- Squid Web Proxy Cache 2.6.STABLE3
- Squid Web Proxy Cache 2.6.STABLE4
- Squid Web Proxy Cache 2.6.STABLE5
- Squid Web Proxy Cache 2.6.STABLE6
- Squid Web Proxy Cache 2.6.STABLE7
- Squid Web Proxy Cache 2.7
- Squid Web Proxy Cache 2.7.STABLE5
- Squid Web Proxy Cache 2.7.STABLE6
- Squid Web Proxy Cache 3.0.0
- Squid Web Proxy Cache 3.0.0 PRE1
- Squid Web Proxy Cache 3.0.0 PRE2
- Squid Web Proxy Cache 3.0.0 PRE3
- Squid Web Proxy Cache 3.0.STABLE1
- Squid Web Proxy Cache 3.0.STABLE12
- Squid Web Proxy Cache 3.0.STABLE13
- Squid Web Proxy Cache 3.0.STABLE16
- Squid Web Proxy Cache 3.0.STABLE17
- Squid Web Proxy Cache 3.0.STABLE2
- Squid Web Proxy Cache 3.0.STABLE3
- Squid Web Proxy Cache 3.0.STABLE4
- Squid Web Proxy Cache 3.0.STABLE5
- Squid Web Proxy Cache 3.0.STABLE6
- Squid Web Proxy Cache 3.0.STABLE7
- Squid Web Proxy Cache 3.1
- Squid Web Proxy Cache 3.1.0.11
- Squid Web Proxy Cache 3.1.0.12
- Squid Web Proxy Cache 3.1.0.4
- Squid Web Proxy Cache 3.1.0.5
- SuSE openSUSE 11.0
- SuSE openSUSE 11.1
- SuSE openSUSE 11.2
- SuSE SUSE Linux Enterprise 10 SP2
- SuSE SUSE Linux Enterprise 10 SP3
- SuSE SUSE Linux Enterprise 11
- SuSE SUSE Linux Enterprise Server 9
- Turbolinux Appliance Server 2.0
- Turbolinux Appliance Server 3.0
- Turbolinux Appliance Server 3.0 X64
- Turbolinux Turbolinux Server 10.0.0
- Turbolinux Turbolinux Server 10.0.0 X64
- Turbolinux Turbolinux Server 11
- Turbolinux Turbolinux Server 11 X64
- Ubuntu Ubuntu Linux 6.06 LTS Amd64
- Ubuntu Ubuntu Linux 6.06 LTS I386
- Ubuntu Ubuntu Linux 6.06 LTS Powerpc
- Ubuntu Ubuntu Linux 6.06 LTS Sparc
- Ubuntu Ubuntu Linux 8.04 LTS Amd64
- Ubuntu Ubuntu Linux 8.04 LTS I386
- Ubuntu Ubuntu Linux 8.04 LTS Lpia
- Ubuntu Ubuntu Linux 8.04 LTS Powerpc
- Ubuntu Ubuntu Linux 8.04 LTS Sparc
- Ubuntu Ubuntu Linux 8.10 Amd64
- Ubuntu Ubuntu Linux 8.10 I386
- Ubuntu Ubuntu Linux 8.10 Lpia
- Ubuntu Ubuntu Linux 8.10 Powerpc
- Ubuntu Ubuntu Linux 8.10 Sparc
- Ubuntu Ubuntu Linux 9.04 Amd64
- Ubuntu Ubuntu Linux 9.04 I386
- Ubuntu Ubuntu Linux 9.04 Lpia
- Ubuntu Ubuntu Linux 9.04 Powerpc
- Ubuntu Ubuntu Linux 9.04 Sparc
- Ubuntu Ubuntu Linux 9.10 Amd64
- Ubuntu Ubuntu Linux 9.10 I386
- Ubuntu Ubuntu Linux 9.10 Lpia
- Ubuntu Ubuntu Linux 9.10 Powerpc
- Ubuntu Ubuntu Linux 9.10 Sparc
References
- BugTraq: 36091
- CVE: CVE-2009-2855
- URL: http://xforce.iss.net/xforce/xfdb/52610