Facebook Google Plus Twitter LinkedIn YouTube RSS Menu Search Resource - BlogResource - WebinarResource - ReportResource - Eventicons_066 icons_067icons_068icons_069icons_070

Squid Proxy < 2.5.STABLE8 Multiple Vulnerabilities



The remote host is vulnerable to a Denial of Service (DoS) attack.


The remote Squid caching proxy, according to its version number, may be vulnerable to a remote denial of service.

This flaw is caused due to an input validation error in the NTLM module.

An attacker can exploit this flaw to crash the server with a specially crafted packet.

The remote Squid proxy is also vulnerable to a cache-corruption flaw due to incorrect parsing of malformed HTTP headers. An attacker exploiting this flaw would be able to poison the cache.

The remote Squid proxy is vulnerable to an authentication bypass in the squid_ldap_auth module as well as a remote overflow due to oversized HTTP headers.


Upgrade to Squid 2.5.STABLE8 or higher.