CVE-2005-0211
published 2005-05-02CVE-2005-0211: Buffer overflow in wccp.c in Squid 2.5 before 2.5.STABLE7 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long…
PriorityP342high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
22.15%
97.4th percentile
Buffer overflow in wccp.c in Squid 2.5 before 2.5.STABLE7 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long WCCP packet, which is processed by a recvfrom function call that uses an incorrect length parameter.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | squid | < squid 2.5.7-6 (bookworm) | squid 2.5.7-6 (bookworm) |
| squid-cache | squid | — | — |
| squid-cache | squid | — | — |
| squid-cache | squid | — | — |
| squid-cache | squid | — | — |
| squid-cache | squid | — | — |
| squid-cache | squid | — | — |
| squid | squid | >= 0 < 2.5.7-6 | 2.5.7-6 |
| squid | squid | >= 0 < 2.5.7-6 | 2.5.7-6 |
| squid | squid | >= 0 < 2.5.7-6 | 2.5.7-6 |
| squid | squid | >= 0 < 2.5.7-6 | 2.5.7-6 |
CVSS provenance
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv7.5HIGH
vendor_debian7.5HIGH
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Squid vulnerabilities
vendor_ubuntu·2005-02-08
CVE-2005-0173 Squid vulnerabilities
Title: Squid vulnerabilities
Summary: Squid vulnerabilities
A possible authentication bypass was discovered in the LDAP
authentication backend. LDAP ignores leading and trailing whitespace
in search filters. This could possibly be abused to bypass explicit
access controls or confuse accounting when using several variants of
the login name. (CAN-2005-0173)
Previous Squid versions were not strict enough while parsing HTTP
requests and responses. Various violations of the HTTP protocol, such
as multiple Content-Length header lines, invalid "Carriage Return"
characters, and HTTP header names containing whitespace, led to cache
pollution and could possibly be exploited to deliver wrong content to
clients. (CAN-2005-0174)
Squid was susceptible to a cache poisoning attack called "HTTP
respons
Red Hat
security flaw
vendor_redhat·2005-01-28·CVSS 7.5
CVE-2005-0211 [HIGH] security flaw
security flaw
Buffer overflow in wccp.c in Squid 2.5 before 2.5.STABLE7 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long WCCP packet, which is processed by a recvfrom function call that uses an incorrect length parameter.
Debian
CVE-2005-0211: squid - Buffer overflow in wccp.c in Squid 2.5 before 2.5.STABLE7 allows remote attacker...
vendor_debian·2005·CVSS 7.5
CVE-2005-0211 [HIGH] CVE-2005-0211: squid - Buffer overflow in wccp.c in Squid 2.5 before 2.5.STABLE7 allows remote attacker...
Buffer overflow in wccp.c in Squid 2.5 before 2.5.STABLE7 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long WCCP packet, which is processed by a recvfrom function call that uses an incorrect length parameter.
Scope: local
bookworm: resolved (fixed in 2.5.7-6)
bullseye: resolved (fixed in 2.5.7-6)
forky: resolved (fixed in 2.5.7-6)
sid: resolved (fixed in 2.5.7-6)
trixie: resolved (fixed in 2.5.7-6)
GHSA
GHSA-j8f6-3q8f-r8ch: Buffer overflow in wccp
ghsa_unreviewed·2022-05-01
CVE-2005-0211 [HIGH] CWE-119 GHSA-j8f6-3q8f-r8ch: Buffer overflow in wccp
Buffer overflow in wccp.c in Squid 2.5 before 2.5.STABLE7 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long WCCP packet, which is processed by a recvfrom function call that uses an incorrect length parameter.
OSV
CVE-2005-0211: Buffer overflow in wccp
osv·2005-05-02·CVSS 7.5
CVE-2005-0211 [HIGH] CVE-2005-0211: Buffer overflow in wccp
Buffer overflow in wccp.c in Squid 2.5 before 2.5.STABLE7 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long WCCP packet, which is processed by a recvfrom function call that uses an incorrect length parameter.
No detection rules found.
No public exploits indexed.
http://fedoranews.org/updates/FEDORA--.shtmlhttp://marc.info/?l=bugtraq&m=110780531820947&w=2http://secunia.com/advisories/14076http://securitytracker.com/id?1013045http://www.debian.org/security/2005/dsa-667http://www.kb.cert.org/vuls/id/886006http://www.mandriva.com/security/advisories?name=MDKSA-2005:034http://www.novell.com/linux/security/advisories/2005_06_squid.htmlhttp://www.osvdb.org/13319http://www.redhat.com/support/errata/RHSA-2005-060.htmlhttp://www.redhat.com/support/errata/RHSA-2005-061.htmlhttp://www.securityfocus.com/bid/12432http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-wccp_buffer_overflowhttp://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-wccp_buffer_overflow.patchhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9573http://fedoranews.org/updates/FEDORA--.shtmlhttp://marc.info/?l=bugtraq&m=110780531820947&w=2http://secunia.com/advisories/14076http://securitytracker.com/id?1013045http://www.debian.org/security/2005/dsa-667http://www.kb.cert.org/vuls/id/886006http://www.mandriva.com/security/advisories?name=MDKSA-2005:034http://www.novell.com/linux/security/advisories/2005_06_squid.htmlhttp://www.osvdb.org/13319http://www.redhat.com/support/errata/RHSA-2005-060.htmlhttp://www.redhat.com/support/errata/RHSA-2005-061.htmlhttp://www.securityfocus.com/bid/12432http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-wccp_buffer_overflowhttp://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-wccp_buffer_overflow.patchhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9573
2005-05-02
Published