Test ID:	1.3.6.1.4.1.25623.1.0.802062
Category:	Denial of Service
Title:	Squid Accept-Language Header DoS Vulnerability (SQUID-2013:1)
Summary:	Squid is prone to a denial of service (DoS) vulnerability.
Description:	Summary: Squid is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: Error within the 'strHdrAcptLangGetItem()' function in errorpage.cc when handling the 'Accept-Language' header. Vulnerability Impact: Successful exploitation could allow remote attackers to cause a denial of service via a crafted 'Accept-Language' header. Affected Software/OS: Squid version 3.2.x before 3.2.9 and 3.3.x before 3.3.3. Solution: Update to version 3.2.9, 3.3.3 or later. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2013-1839 20130305 Squid 3.2.7 DoS (loop, 100% cpu) strHdrAcptLangGetItem() at errorpage.cc http://archives.neohapsis.com/archives/bugtraq/2013-03/0025.html 20130307 Re: Squid 3.2.7 DoS (loop, 100% cpu) strHdrAcptLangGetItem() at errorpage.cc http://archives.neohapsis.com/archives/bugtraq/2013-03/0069.html 52588 http://secunia.com/advisories/52588 58316 http://www.securityfocus.com/bid/58316 [oss-security] 20130311 Re: Squid 3.2.7 DoS (loop, 100% cpu) strHdrAcptLangGetItem() at errorpage.cc http://www.openwall.com/lists/oss-security/2013/03/11/7 http://www.squid-cache.org/Advisories/SQUID-2013_1.txt
Copyright	Copyright (C) 2013 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.