Summary
This host is running Squid and is prone to Denial Of Service vulnerabilities.
Impact
Successful exploitation could allow remote attackers to cause a denial of service via a crafted auth header with certain comma delimiters that trigger an infinite loop of calls to the strcspn function.
Solution
Upgrade to Squid Version 3.1.4 or later,
For further updates refer, http://www.squid-cache.org/Download/
Insight
The flaw is due to error in 'strListGetItem()' function within 'src/HttpHeaderTools.c'.
Affected
Squid Version 2.7.X
References
Severity
Classification
-
CVE CVE-2009-2855 -
CVSS Base Score: 5.0
AV:N/AC:L/Au:N/C:N/I:N/A:P
Related Vulnerabilities