CVE-2005-0241

The httpProcessReplyHeader function in http.c for Squid 2.5-STABLE7 and earlier does not properly set the debug context when it is handling "oversized" HTTP…

published February 8, 2005

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.4th percentile for exploit probability.

CVSS
—
EPSS
70%
Percentile
99.4
In the wild
Unconfirmed
What it is

The httpProcessReplyHeader function in http.c for Squid 2.5-STABLE7 and earlier does not properly set the debug context when it is handling "oversized" HTTP reply headers, which might allow remote attackers to poison the cache or bypass access controls based on header size.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.69661 · 99.4th percentile
Published
2005-02-08T05:00Z
EPSS history
Timeline
  • 08 FEB 05:00Z
    The httpProcessReplyHeader function in http.c for Squid 2.5-STABLE7 and earlier does not properly set the debug context when it is handling "oversized" HTTP…
    cvelistv5