Test ID:	1.3.6.1.4.1.25623.1.0.10768
Category:	Denial of Service
Title:	Squid Denial-of-Service Vulnerability
Summary:	A problem exists in the way the remote Squid proxy server handles a; special 'mkdir-only' PUT request, and causes denial of service to the proxy server.
Description:	Summary: A problem exists in the way the remote Squid proxy server handles a special 'mkdir-only' PUT request, and causes denial of service to the proxy server. Vulnerability Impact: An attacker may use this flaw to prevent your LAN users from accessing the web. Solution: Apply the vendor released patch, for squid it is available at the linked references. You can also protect yourself by enabling access lists on your proxy. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	BugTraq ID: 3354 Common Vulnerability Exposure (CVE) ID: CVE-2001-0843 http://www.securityfocus.com/bid/3354 Bugtraq: 20010921 squid DoS (Google Search) http://marc.info/?l=bugtraq&m=100109679010256&w=2 Conectiva Linux advisory: CLA-2001:426 http://archives.neohapsis.com/archives/linux/conectiva/2001-q3/0020.html Debian Security Information: DSA-077 (Google Search) http://www.debian.org/security/2001/dsa-077 http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-088.php3 http://www.redhat.com/support/errata/RHSA-2001-113.html SuSE Security Announcement: SuSE-SA:2001:037 (Google Search) http://www.novell.com/linux/security/advisories/2001_037_squid_txt.html XForce ISS Database: squid-mkdir-put-dos(7157) https://exchange.xforce.ibmcloud.com/vulnerabilities/7157
Copyright	This script is Copyright (C) 2001 Adam Baldwin

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.