Vulnerability in Squid
CVE-2005-0174
Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or conduct certain attacks via headers that do not follow the HTTP specification, including (1) multiple Content-Length headers, (2) carriage return (CR) characters th…
EPSS: 0.508 (98.8th percentile) — read the EPSS interpretation.
Affected products
- Squid — versions 2.5.6, 2.5.stable1, 2.5.stable2
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_FEDORA, vendor-advisory)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_FEDORA, vendor-advisory)
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory, Patch)
- cve@mitre.org (vendor-advisory, x_refsource_CONECTIVA, Vendor Advisory)
- cve@mitre.org (x_refsource_OVAL, signature, vdb-entry)
- cve@mitre.org (vendor-advisory, x_refsource_MANDRAKE)