QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2005-0174

Back to search

CVE-2005-0174

Published: Feb 6, 2005

Modified: Aug 7, 2024

PUBLISHED

Description

Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or conduct certain attacks via headers that do not follow the HTTP specification, including (1) multiple Content-Length headers, (2) carriage return (CR) characters that are not part of a CRLF pair, and (3) header names containing whitespace characters.

VendorProductVersions

n/a

n/a

affected
n/a

References

FEDORA-2005-373
vendor-advisory
x_refsource_FEDORA
12412
vdb-entry
x_refsource_BID
FLSA-2006:152809
vendor-advisory
x_refsource_FEDORA
VU#768702
third-party-advisory
x_refsource_CERT-VN
RHSA-2005:061
vendor-advisory
x_refsource_REDHAT
CLA-2005:931
vendor-advisory
x_refsource_CONECTIVA
oval:org.mitre.oval:def:10656
vdb-entry
signature
x_refsource_OVAL
MDKSA-2005:034
vendor-advisory
x_refsource_MANDRAKE
20050207 [USN-77-1] Squid vulnerabilities
mailing-list
x_refsource_BUGTRAQ
SUSE-SA:2005:006
vendor-advisory
x_refsource_SUSE
RHSA-2005:060
vendor-advisory
x_refsource_REDHAT

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now