CVE-2005-0241 The httpProcessReplyHeader function in http.c for Squid 2.5-STABLE7 and earlier does not properly set the debug context when it is handling "oversized" HTTP reply headers, which might allow remote att...
MediumCVSS 5.0
EPSS 69.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The httpProcessReplyHeader function in http.c for Squid 2.5-STABLE7 and earlier does not properly set the debug context when it is handling "oversized" HTTP reply headers, which might allow remote attackers to poison the cache or bypass access controls based on header size.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| squid | = 2.5.stable1 | No fix listed |
| squid | = 2.5.stable2 | No fix listed |
| squid | = 2.5.stable3 | No fix listed |
| squid | = 2.5.stable4 | No fix listed |
| squid | = 2.5.stable5 | No fix listed |
| squid | = 2.5.stable6 | No fix listed |
| squid | = 2.5.stable7 | No fix listed |
| debian/squid(Debian:12) | < 2.5.7-7 | 2.5.7-7 |
| debian/squid(Debian:13) | < 2.5.7-7 | 2.5.7-7 |
| debian/squid(Debian:14) | < 2.5.7-7 | 2.5.7-7 |
References
- CLA-2005:931 patch vendor-advisory
- FLSA-2006:152809 vendor-advisory
- 14091 third-party-advisory
- VU#823350 patch third-party-advisory us-government-resource
- SUSE-SA:2005:006 patch vendor-advisory
- RHSA-2005:060 patch vendor-advisory
- RHSA-2005:061 patch vendor-advisory
- 12412 vdb-entry
- www.squid-cache.org patch
- www.squid-cache.org patch
- www.squid-cache.org patch
- squid-http-cache-poisoning(19060) vdb-entry
- oval:org.mitre.oval:def:10998 signature vdb-entry
- Debian Security Tracker CVE-2005-0241 vendor-advisory