This application requires Javascript for optimal performance.

HTTP.Invalid.Response.Status.Code.DoS

Release Date

Sep 15, 2009

Severity

medium

Impact

Denial of service

Description

This indicates an attack attempt against a denial-of-service vulnerability in Squid.

The vulnerability is caused by an error when the vulnerable software handles a specially crafted HTTP response. It allows a remote attacker to create a denial-of-service condition on the target server.

Affected Products

Squid versions 3.0 through 3.0.STABLE16
Squid versions 3.1 through 3.1.0.11

Recommended Actions

Upgrade to the latest versions:
http://www.squid-cache.org/Download/

Coverage

IPS
VCM

Common Vulnerabilities and Exposures (CVE)

CVE-2009-2622

Reference/s

http://www.securityfocus.com/bid/35812 (BugTraq)
http://www.frsirt.com/english/advisories/2009/2013 (FrSIRT)

Reference: VID-17688