CVE-2005-0095: Medium severity Squid Squid vulnerability
The WCCP message parsing code in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via malformed WCCP messages with source addresses that are spoofed to reference Squid's home router and invalid WCCPISEEYOU cache numbers.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-0095?
CVE-2005-0095 has a severity rating that indicates it allows for denial of service attacks, potentially crashing affected Squid instances.
How do I fix CVE-2005-0095?
To fix CVE-2005-0095, upgrade to a version of Squid that is not vulnerable, specifically version 2.5.STABLE8 or later.
What versions of Squid are affected by CVE-2005-0095?
CVE-2005-0095 affects Squid versions up to 2.5.STABLE7, including various earlier patches and stable releases.
What type of vulnerability is CVE-2005-0095?
CVE-2005-0095 is a denial of service vulnerability that can be exploited through malformed WCCP messages.
Can CVE-2005-0095 be exploited remotely?
Yes, CVE-2005-0095 can be exploited remotely by attackers sending specially crafted WCCP messages.