Published: 07/02/2005 Updated: 11/10/2017

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

Squid 2.5 up to 2.5.STABLE7 allows remote malicious users to poison the cache or conduct certain attacks via headers that do not follow the HTTP specification, including (1) multiple Content-Length headers, (2) carriage return (CR) characters that are not part of a CRLF pair, and (3) header names containing whitespace characters.

Vulnerable Product	Search on Vulmon	Subscribe to Product
squid squid 2.5.6
squid squid 2.5_.stable1
squid squid 2.5_.stable3
squid squid 2.5.stable3
squid squid 2.5.stable4
squid squid 2.5.stable5
squid squid 2.5_.stable6
squid squid 2.5_stable3
squid squid 2.5.stable6
squid squid 2.5.stable7
squid squid 2.5_stable4
squid squid 2.5_stable9
squid squid 2.5.stable1
squid squid 2.5.stable2
squid squid 2.5_.stable4
squid squid 2.5_.stable5

A possible authentication bypass was discovered in the LDAP authentication backend LDAP ignores leading and trailing whitespace in search filters This could possibly be abused to bypass explicit access controls or confuse accounting when using several variants of the login name (CAN-2005-0173) ...

Synopsis squid security update Type/Severity Security Advisory: Important Topic An updated Squid package that fixes several security issues is now available Description Squid is a full-featured Web proxy cacheA buffer overflow flaw was found in the Gopher relay parser This bugcould allow ...

Synopsis squid security update Type/Severity Security Advisory: Important Topic An updated Squid package that fixes several security issues is now availableThis update has been rated as having important security impact by the Red HatSecurity Response Team Description Squid is a full-featu ...

NVD-CWE-Other http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-header_parsing http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000931 http://www.redhat.com/support/errata/RHSA-2005-060.html http://www.redhat.com/support/errata/RHSA-2005-061.html http://www.novell.com/linux/security/advisories/2005_06_squid.html http://www.kb.cert.org/vuls/id/768702 http://www3.br.squid-cache.org/Advisories/SQUID-2005_4.txt http://www.redhat.com/archives/fedora-announce-list/2005-May/msg00025.html http://fedoranews.org/updates/FEDORA--.shtml http://www.securityfocus.com/bid/12412 http://www.mandriva.com/security/advisories?name=MDKSA-2005:034 http://marc.info/?l=bugtraq&m=110780531820947&w=2 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10656 https://usn.ubuntu.com/77-1/https://nvd.nist.gov

CVE-2005-0174

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect