CVE-2005-0211: Buffer Overflow
Buffer overflow in wccp.c in Squid 2.5 before 2.5.STABLE7 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long WCCP packet, which is processed by a recvfrom function call that uses an incorrect length parameter.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-0211?
CVE-2005-0211 is classified as a critical vulnerability due to its potential for remote code execution and denial of service.
How do I fix CVE-2005-0211?
The solution for CVE-2005-0211 is to upgrade to Squid version 2.5.STABLE7 or later.
Who is affected by CVE-2005-0211?
CVE-2005-0211 affects all versions of Squid 2.5 prior to 2.5.STABLE7, including Squid 2.5.STABLE1 to 2.5.STABLE6.
What type of attack is enabled by CVE-2005-0211?
CVE-2005-0211 allows remote attackers to execute arbitrary code and cause denial of service through crafted WCCP packets.
Is CVE-2005-0211 related to the recvfrom function?
Yes, CVE-2005-0211 involves a buffer overflow due to improper handling of length parameters in the recvfrom function.