PT-2005-1263 · Squid+1 · Squid+2

Published 2005-02-06 · Updated 2017-10-11 · CVE-2005-0175

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Squid versions 2.5 up to 2.5.STABLE7

Description The issue allows remote attackers to poison the cache via an HTTP response splitting attack.

Recommendations For Squid versions 2.5 up to 2.5.STABLE7, update to a version later than 2.5.STABLE7 to resolve the issue.

Fix

Related Identifiers

CVE-2005-0175

DSA-667-1

RHSA-2005:060

RHSA-2005:061

RHSA-2005_060

RHSA-2005_061

Affected Products

Red Hat

Squid

Squid Cache

References · 32

• http://debian.org/security/2005/dsa-667 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2005-060.html · Vendor Advisory
• http://squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-response_splitting · Vendor Advisory
• http://fedoranews.org/updates/FEDORA--.shtml · Vendor Advisory
• http://kb.cert.org/vuls/id/625878 · Patch
• http://redhat.com/support/errata/RHSA-2005-061.html · Vendor Advisory
• http://novell.com/linux/security/advisories/2005_06_squid.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-0175 · Vendor Advisory
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000931 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2005:034 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2005-0175 · Vendor Advisory
• http://squid-cache.org/Advisories/SQUID-2005_5.txt · Vendor Advisory
• http://redhat.com/archives/fedora-announce-list/2005-May/msg00025.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2005-0175 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-0175 · Security Note