Intrusion Prevention

Squid.Proxy.Cache.cachemgr.cgi.DoS

Description

This indicates an attack attempt to exploit a Denial of Service vulnerability in Squid Proxy Cache Manager.
The vulnerability is due to insufficient sanitizing of user supplied inputs in cachemgr.cgi of the application when handling crafted HTTP POST request. A remote attacker may be able to exploit this to cause a denial of service condition on the affected system.

Affected Products

Squid Project Squid 3.3.0.1
Squid Project Squid 3.2 through 3.2.3
Squid Project Squid 3.1 through 3.1.21
Squid Project Squid 3.0
Squid Project Squid 2.x

Impact

Server Compromise: Remote Attackers can crash vulnerable systems via denial of service

Recommended Actions

Currently we are unaware of any vendor working supplied patch for this issue

CVE References

CVE-2012-5643