Squid < 2.5 STABLE11 NTLM Authentication Header DoS

Low Log Correlation Engine Plugin ID 801047


The remote proxy is vulnerable to a DoS attack.


The remote squid caching proxy, according to its version number, is vulnerable to an attack where an attacker can disable the Squid proxy by sending a malformed NTLM request. Successful exploitation leads to a loss of availability.


Upgrade to version 2.5 STABLE11 or higher.

See Also


Plugin Details

Severity: Low

ID: 801047

File Name: 801047.prm

Family: Web Servers

Risk Information

Risk Factor: Low


Base Score: 5.4

Temporal Score: 4

Vector: CVSS2#AV:N/AC:H/Au:N/C:N/I:N/A:C

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

Reference Information

CVE: CVE-2005-2917

BID: 14977