NVD

Id
66005  
Name
CVE-2005-0241  
Description
The httpProcessReplyHeader function in http.c for Squid 2.5-STABLE7 and earlier does not properly set the debug context when it is handling "oversized" HTTP reply headers, which might allow remote attackers to poison the cache or bypass access controls based on header size.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-07-18  
Published
2005-05-02  
Modified Date
2017-07-10  
Seq
2005-0241  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
343908 66005 CVE-2005-0241 CLA-2005:931  View
343909 66005 CVE-2005-0241 FLSA-2006:152809  View
343910 66005 CVE-2005-0241 oval:org.mitre.oval:def:10998  View
343911 66005 CVE-2005-0241 VU#823350  View
343912 66005 CVE-2005-0241 SUSE-SA:2005:006  View
343913 66005 CVE-2005-0241 RHSA-2005:060  View
343914 66005 CVE-2005-0241 RHSA-2005:061  View
343915 66005 CVE-2005-0241 12412  View
343916 66005 CVE-2005-0241 http://www.squid-cache.org/bugs/show_bug.cgi?id=1216  View
343917 66005 CVE-2005-0241 http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-oversize_reply_headers  View
343918 66005 CVE-2005-0241 http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-oversize_reply_headers.patch  View
343919 66005 CVE-2005-0241 squid-http-cache-poisoning(19060)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61873 JVNDB-2005-000075 Squid における過大な HTTP リプライヘッダによるキャッシュ汚染の脆弱性 Squid には、http.c 内の httpProcessReplyHeader() 関数の不備のため、異常に大きいサイズの HTTP リプライヘッダを受信した場合に、キャッシュ汚染を許してしまう脆弱性が存在します。 CVE-2005-0241 11445 CVE-2005-0241 66005 5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000075.html 2005-01-31 2007-04-01 View