Lucene search
FreeBSD4E4BD2C2-6BD5-11D9-9E1E-C296AC722CB3HistoryMar 01, 2004 - 12:00 a.m.
squid -- HTTP response splitting cache pollution attack
2004-03-0100:00:00
vuxml.freebsd.org
13
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.047 Low
EPSS
Percentile
92.5%
According to a whitepaper published by Sanctum, Inc., it
is possible to mount cache poisoning attacks against, among others,
squid proxies by inserting false replies into the HTTP stream.
The squid patches page notes:
This patch additionally strengthens Squid from the HTTP response
attack described by Sanctum.
Related
debiancve
debiancve
CVE-2005-0175
2005-02-07 05:00:00
cve
cve
CVE-2005-0175
2005-02-07 05:00:00
CVE-2005-1389
2005-05-03 04:00:00
cert
cert
Multiple devices process HTTP requests inconsistently
2005-02-04 00:00:00
nessus
nessus
FreeBSD : squid -- HTTP response splitting cache pollution attack (4e4bd2c2-6bd5-11d9-9e1e-c296ac722cb3)
2005-07-13 00:00:00
Ubuntu 4.10 : squid vulnerabilities (USN-77-1)
2006-01-15 00:00:00
GLSA-200502-04 : Squid: Multiple vulnerabilities
2005-02-14 00:00:00
openvas
openvas
FreeBSD Ports: squid
2008-09-04 00:00:00
FreeBSD Ports: squid
2008-09-04 00:00:00
Ubuntu: Security Advisory (USN-77-1)
2022-08-26 00:00:00
ubuntucve
ubuntucve
CVE-2005-0175
2005-02-07 00:00:00
debian
debian
[SECURITY] [DSA 667-1] New squid packages fix several vulnerabilities
2005-02-04 16:35:59
[SECURITY] [DSA 667-1] New squid packages fix several vulnerabilities
2005-02-04 16:35:59
ubuntu
ubuntu
Squid vulnerabilities
2005-02-08 00:00:00
gentoo
gentoo
Squid: Multiple vulnerabilities
2005-02-02 00:00:00
osv
osv
squid - several
2005-02-04 00:00:00
redhat
redhat
(RHSA-2005:061) squid security update
2005-02-11 00:00:00
(RHSA-2005:060) squid security update
2005-02-15 00:00:00
suse
suse
remote command execution in squid
2005-02-10 15:13:39
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.047 Low
EPSS
Percentile
92.5%
Related for 4E4BD2C2-6BD5-11D9-9E1E-C296AC722CB3