CVE

Id
11380  
CVE No.
CVE-2005-0174  
Status
Candidate  
Description
Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or conduct certain attacks via headers that do not follow the HTTP specification, including (1) multiple Content-Length headers, (2) carriage return (CR) characters that are not part of a CRLF pair, and (3) header names containing whitespace characters.  
Phase
Assigned (20050127)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
80862 11380 CVE-2005-0174 CONFIRM:http://www3.br.squid-cache.org/Advisories/SQUID-2005_4.txt  View
80863 11380 CVE-2005-0174 CONFIRM:http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-header_parsing  View
80864 11380 CVE-2005-0174 CONECTIVA:CLA-2005:931  View
80865 11380 CVE-2005-0174 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000931  View
80866 11380 CVE-2005-0174 FEDORA:FEDORA-2005-373  View
80867 11380 CVE-2005-0174 URL:http://www.redhat.com/archives/fedora-announce-list/2005-May/msg00025.html  View
80868 11380 CVE-2005-0174 FEDORA:FLSA-2006:152809  View
80869 11380 CVE-2005-0174 URL:http://fedoranews.org/updates/FEDORA--.shtml  View
80870 11380 CVE-2005-0174 MANDRAKE:MDKSA-2005:034  View
80871 11380 CVE-2005-0174 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2005:034  View
80872 11380 CVE-2005-0174 REDHAT:RHSA-2005:060  View
80873 11380 CVE-2005-0174 URL:http://www.redhat.com/support/errata/RHSA-2005-060.html  View
80874 11380 CVE-2005-0174 REDHAT:RHSA-2005:061  View
80875 11380 CVE-2005-0174 URL:http://www.redhat.com/support/errata/RHSA-2005-061.html  View
80876 11380 CVE-2005-0174 SUSE:SUSE-SA:2005:006  View
80877 11380 CVE-2005-0174 URL:http://www.novell.com/linux/security/advisories/2005_06_squid.html  View
80878 11380 CVE-2005-0174 BUGTRAQ:20050207 [USN-77-1] Squid vulnerabilities  View
80879 11380 CVE-2005-0174 URL:http://marc.info/?l=bugtraq&m=110780531820947&w=2  View
80880 11380 CVE-2005-0174 CERT-VN:VU#768702  View
80881 11380 CVE-2005-0174 URL:http://www.kb.cert.org/vuls/id/768702  View
80882 11380 CVE-2005-0174 BID:12412  View
80883 11380 CVE-2005-0174 URL:http://www.securityfocus.com/bid/12412  View
80884 11380 CVE-2005-0174 OVAL:oval:org.mitre.oval:def:10656  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
61916 JVNDB-2005-000118 Linux Kernel の shmctl 関数におけるメモリ情報が漏洩する脆弱性 ------------ CVE-2005-0176 11380 5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000118.html  View