CVE-2005-0174

2005-02-0700:00:00

ubuntu.com

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

EPSS

0.97

Percentile

99.7%

JSON

Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or
conduct certain attacks via headers that do not follow the HTTP
specification, including (1) multiple Content-Length headers, (2) carriage
return (CR) characters that are not part of a CRLF pair, and (3) header
names containing whitespace characters.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchsquid< 2.5.12-4ubuntu2.2UNKNOWN
ubuntu6.10noarchsquid< 2.6.1-3ubuntu1.3UNKNOWN
ubuntu7.04noarchsquid< 2.6.5-4ubuntu2UNKNOWN