Squid < 3.0STABLE24 HTCP Request Denial of Service

Medium Log Correlation Engine Plugin ID 801037


The remote host is vulnerable to a Denial of Service (DoS) attack.


According to its banner, the version of Squid proxy caching server installed on the remote host is 2.x or 3.0.x earlier than 3.0.STABLE24. Such versions are potentially affected by a denial-of-service vulnerability due to incorrect processing of specially crafted HTCP packets.


Either upgrade to Squid version 3.0.STABLE24 or later, or apply the patch referenced in the project's advisory above.

See Also




Plugin Details

Severity: Medium

ID: 801037

Family: Web Servers

Published: 2010/02/12

Nessus ID: 45591

Risk Information

Risk Factor: Medium

CVSS v2.0

Base Score: 5

Temporal Score: 4.1

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P

Temporal Vector: CVSS2#E:F/RL:OF/RC:C

Vulnerability Information

Patch Publication Date: 2010/02/12

Vulnerability Publication Date: 2010/02/12

Reference Information

CVE: CVE-2010-0639

BID: 38212