CVE-2005-0174
published 2005-02-07CVE-2005-0174: Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or conduct certain attacks via headers that do not follow the HTTP specification…
PriorityP432medium5CVSS 2.0
AVNACLAuNCNIPAN
EPSS
50.78%
98.8th percentile
Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or conduct certain attacks via headers that do not follow the HTTP specification, including (1) multiple Content-Length headers, (2) carriage return (CR) characters that are not part of a CRLF pair, and (3) header names containing whitespace characters.
Affected
21 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | squid | < squid 2.5.7-6 (bookworm) | squid 2.5.7-6 (bookworm) |
| squid | squid | — | — |
| squid | squid | — | — |
| squid | squid | — | — |
| squid | squid | — | — |
| squid | squid | — | — |
| squid | squid | — | — |
| squid | squid | — | — |
| squid | squid | — | — |
| squid | squid | — | — |
| squid | squid | — | — |
| squid | squid | — | — |
| squid | squid | — | — |
| squid | squid | — | — |
| squid | squid | — | — |
| squid | squid | — | — |
| squid | squid | — | — |
| squid | squid | >= 0 < 2.5.7-6 | 2.5.7-6 |
| squid | squid | >= 0 < 2.5.7-6 | 2.5.7-6 |
| squid | squid | >= 0 < 2.5.7-6 | 2.5.7-6 |
| squid | squid | >= 0 < 2.5.7-6 | 2.5.7-6 |
Detection & IOCsextracted from sources · hover to see the quote
- →Detect HTTP requests/responses with multiple Content-Length headers, which can be used to poison the Squid cache ↗
- →Detect HTTP traffic containing bare carriage return (CR) characters that are not part of a CRLF pair in headers, indicative of cache poisoning attempts against Squid ↗
- →Detect HTTP headers whose names contain whitespace characters, which violates the HTTP specification and can be abused to poison Squid's cache ↗
- →Target Squid versions 2.5 through 2.5.STABLE7 as vulnerable; presence of these versions in an environment indicates exposure to cache poisoning and related attacks ↗
- ·Squid versions 2.5 through 2.5.STABLE7 are affected; the vulnerability stems from insufficient strictness in HTTP request/response header parsing, leading to cache pollution and potential delivery of wrong content to clients ↗
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
osv5.0MEDIUM
vendor_debian5.0MEDIUM
vendor_redhat5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-7wg5-v5xw-j9f6: Squid 2
ghsa_unreviewed·2022-05-01
CVE-2005-0174 [MEDIUM] GHSA-7wg5-v5xw-j9f6: Squid 2
Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or conduct certain attacks via headers that do not follow the HTTP specification, including (1) multiple Content-Length headers, (2) carriage return (CR) characters that are not part of a CRLF pair, and (3) header names containing whitespace characters.
OSV
CVE-2005-0174: Squid 2
osv·2005-02-07·CVSS 5.0
CVE-2005-0174 [MEDIUM] CVE-2005-0174: Squid 2
Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or conduct certain attacks via headers that do not follow the HTTP specification, including (1) multiple Content-Length headers, (2) carriage return (CR) characters that are not part of a CRLF pair, and (3) header names containing whitespace characters.
Ubuntu
Squid vulnerabilities
vendor_ubuntu·2005-02-08
CVE-2005-0173 Squid vulnerabilities
Title: Squid vulnerabilities
Summary: Squid vulnerabilities
A possible authentication bypass was discovered in the LDAP
authentication backend. LDAP ignores leading and trailing whitespace
in search filters. This could possibly be abused to bypass explicit
access controls or confuse accounting when using several variants of
the login name. (CAN-2005-0173)
Previous Squid versions were not strict enough while parsing HTTP
requests and responses. Various violations of the HTTP protocol, such
as multiple Content-Length header lines, invalid "Carriage Return"
characters, and HTTP header names containing whitespace, led to cache
pollution and could possibly be exploited to deliver wrong content to
clients. (CAN-2005-0174)
Squid was susceptible to a cache poisoning attack called "HTTP
respons
Red Hat
security flaw
vendor_redhat·2005-01-31·CVSS 5.0
CVE-2005-0174 [MEDIUM] security flaw
security flaw
Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or conduct certain attacks via headers that do not follow the HTTP specification, including (1) multiple Content-Length headers, (2) carriage return (CR) characters that are not part of a CRLF pair, and (3) header names containing whitespace characters.
Debian
CVE-2005-0174: squid - Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or condu...
vendor_debian·2005·CVSS 5.0
CVE-2005-0174 [MEDIUM] CVE-2005-0174: squid - Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or condu...
Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or conduct certain attacks via headers that do not follow the HTTP specification, including (1) multiple Content-Length headers, (2) carriage return (CR) characters that are not part of a CRLF pair, and (3) header names containing whitespace characters.
Scope: local
bookworm: resolved (fixed in 2.5.7-6)
bullseye: resolved (fixed in 2.5.7-6)
forky: resolved (fixed in 2.5.7-6)
sid: resolved (fixed in 2.5.7-6)
trixie: resolved (fixed in 2.5.7-6)
No detection rules found.
No public exploits indexed.
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000931http://fedoranews.org/updates/FEDORA--.shtmlhttp://marc.info/?l=bugtraq&m=110780531820947&w=2http://www.kb.cert.org/vuls/id/768702http://www.mandriva.com/security/advisories?name=MDKSA-2005:034http://www.novell.com/linux/security/advisories/2005_06_squid.htmlhttp://www.redhat.com/archives/fedora-announce-list/2005-May/msg00025.htmlhttp://www.redhat.com/support/errata/RHSA-2005-060.htmlhttp://www.redhat.com/support/errata/RHSA-2005-061.htmlhttp://www.securityfocus.com/bid/12412http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-header_parsinghttp://www3.br.squid-cache.org/Advisories/SQUID-2005_4.txthttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10656http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000931http://fedoranews.org/updates/FEDORA--.shtmlhttp://marc.info/?l=bugtraq&m=110780531820947&w=2http://www.kb.cert.org/vuls/id/768702http://www.mandriva.com/security/advisories?name=MDKSA-2005:034http://www.novell.com/linux/security/advisories/2005_06_squid.htmlhttp://www.redhat.com/archives/fedora-announce-list/2005-May/msg00025.htmlhttp://www.redhat.com/support/errata/RHSA-2005-060.htmlhttp://www.redhat.com/support/errata/RHSA-2005-061.htmlhttp://www.securityfocus.com/bid/12412http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-header_parsinghttp://www3.br.squid-cache.org/Advisories/SQUID-2005_4.txthttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10656
2005-02-07
Published