Published: 02/05/2005 Updated: 12/10/2018

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Buffer overflow in wccp.c in Squid 2.5 prior to 2.5.STABLE7 allows remote malicious users to cause a denial of service and possibly execute arbitrary code via a long WCCP packet, which is processed by a recvfrom function call that uses an incorrect length parameter.

Vulnerable Product	Search on Vulmon	Subscribe to Product
squid-cache squid 2.5.stable1
squid-cache squid 2.5.stable6
squid-cache squid 2.5.stable3
squid-cache squid 2.5.stable5
squid-cache squid 2.5.stable2
squid-cache squid 2.5.stable4
debian debian linux 3.0

A possible authentication bypass was discovered in the LDAP authentication backend LDAP ignores leading and trailing whitespace in search filters This could possibly be abused to bypass explicit access controls or confuse accounting when using several variants of the login name (CAN-2005-0173) ...

Synopsis squid security update Type/Severity Security Advisory: Important Topic An updated Squid package that fixes several security issues is now available Description Squid is a full-featured Web proxy cacheA buffer overflow flaw was found in the Gopher relay parser This bugcould allow ...

Synopsis squid security update Type/Severity Security Advisory: Important Topic An updated Squid package that fixes several security issues is now availableThis update has been rated as having important security impact by the Red HatSecurity Response Team Description Squid is a full-featu ...

CWE-119 http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-wccp_buffer_overflow http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-wccp_buffer_overflow.patch http://www.debian.org/security/2005/dsa-667 http://www.redhat.com/support/errata/RHSA-2005-060.html http://www.redhat.com/support/errata/RHSA-2005-061.html http://www.novell.com/linux/security/advisories/2005_06_squid.html http://www.kb.cert.org/vuls/id/886006 http://www.securityfocus.com/bid/12432 http://www.osvdb.org/13319 http://securitytracker.com/id?1013045 http://secunia.com/advisories/14076 http://fedoranews.org/updates/FEDORA--.shtml http://www.mandriva.com/security/advisories?name=MDKSA-2005:034 http://marc.info/?l=bugtraq&m=110780531820947&w=2 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9573 https://usn.ubuntu.com/77-1/https://nvd.nist.gov https://www.kb.cert.org/vuls/id/886006

CVE-2005-0211

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect