CVE-2005-0241
N/A
N/A
Summary
The httpProcessReplyHeader function in http.c for Squid 2.5-STABLE7 and earlier does not properly set the debug context when it is handling "oversized" HTTP reply headers, which might allow remote attackers to poison the cache or bypass access controls based on header size.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- http://secunia.com/advisories/14091
- http://www.kb.cert.org/vuls/id/823350
- http://www.securityfocus.com/bid/12412
- http://www.squid-cache.org/bugs/show_bug.cgi?id=1216
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10998
- http://fedoranews.org/updates/FEDORA–.shtml
- http://www.redhat.com/support/errata/RHSA-2005-061.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19060
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000931
- http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-oversize_reply_headers
- http://www.novell.com/linux/security/advisories/2005_06_squid.html
- http://www.redhat.com/support/errata/RHSA-2005-060.html
- http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-oversize_reply_headers.patch
References
- http://secunia.com/advisories/14091
- http://www.kb.cert.org/vuls/id/823350
- http://www.securityfocus.com/bid/12412
- http://www.squid-cache.org/bugs/show_bug.cgi?id=1216
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10998
- http://fedoranews.org/updates/FEDORA–.shtml
- http://www.redhat.com/support/errata/RHSA-2005-061.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19060
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000931
- http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-oversize_reply_headers
- http://www.novell.com/linux/security/advisories/2005_06_squid.html
- http://www.redhat.com/support/errata/RHSA-2005-060.html
- http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-oversize_reply_headers.patch
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.