CVE-2005-0095

The WCCP message parsing code in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via malformed WCCP messages with…

published January 19, 2005

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.3th percentile for exploit probability.

CVSS
—
EPSS
69%
Percentile
99.3
In the wild
Unconfirmed
What it is

The WCCP message parsing code in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via malformed WCCP messages with source addresses that are spoofed to reference Squid's home router and invalid WCCP_I_SEE_YOU cache numbers.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.68776 · 99.3th percentile
Published
2005-01-19T05:00Z
EPSS history
Timeline
  • 19 JAN 05:00Z
    The WCCP message parsing code in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via malformed WCCP messages with…
    cvelistv5