CVEvulnerability
CVE-2005-0241
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-05-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
Description
The httpProcessReplyHeader function in http.c for Squid 2.5-STABLE7 and earlier does not properly set the debug context when it is handling "oversized" HTTP reply headers, which might allow remote attackers to poison the cache or bypass access controls based on header size.
Affected configurations
• squid squid 2.5.stable1
• squid squid 2.5.stable2
• squid squid 2.5.stable3
• squid squid 2.5.stable4
• squid squid 2.5.stable5
• squid squid 2.5.stable6
• squid squid 2.5.stable7
References
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000931 Patch
- http://fedoranews.org/updates/FEDORA--.shtml fedoranews.org
- http://secunia.com/advisories/14091 secunia.com
- http://www.kb.cert.org/vuls/id/823350 Patch, Third Party Advisory, US Government Resource
- http://www.novell.com/linux/security/advisories/2005_06_squid.html Patch, Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2005-060.html Patch, Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2005-061.html Patch, Vendor Advisory
- http://www.securityfocus.com/bid/12412 www.securityfocus.com
- http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-oversize_reply_headers Patch
- http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-oversize_reply_headers.patch Patch
- http://www.squid-cache.org/bugs/show_bug.cgi?id=1216 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19060 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10998 oval.cisecurity.org
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000931 Patch
- http://fedoranews.org/updates/FEDORA--.shtml fedoranews.org
- http://secunia.com/advisories/14091 secunia.com
- http://www.kb.cert.org/vuls/id/823350 Patch, Third Party Advisory, US Government Resource
- http://www.novell.com/linux/security/advisories/2005_06_squid.html Patch, Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2005-060.html Patch, Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2005-061.html Patch, Vendor Advisory
- http://www.securityfocus.com/bid/12412 www.securityfocus.com
- http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-oversize_reply_headers Patch
- http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-oversize_reply_headers.patch Patch
- http://www.squid-cache.org/bugs/show_bug.cgi?id=1216 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19060 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10998 oval.cisecurity.org