Multiple Denial of Service Vulnerabilities in Tinyproxy Header

Release date:
Updated on:

Affected Systems:
Banu tinyproxy 1.8.3
Description:
--------------------------------------------------------------------------------
Bugtraq id: 55099
Cve id: CVE-2012-3505

Tinyproxy is a lightweight HTTP/HTTPS Proxy background program in the POSIX operating system.

Tinyproxy 1.8.3 and other versions have multiple remote denial-of-service vulnerabilities that affect the 'openssl 'extension. Successful exploitation can cause the application to consume a large amount of memory and cause DOS.

<* Source: gpernot
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Banu
----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Https://banu.com/tinyproxy/