Description
The WCCP message parsing code in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via malformed WCCP messages with source addresses that are spoofed to reference Squid's home router and invalid WCCP_I_SEE_YOU cache numbers.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Ubuntu USN |
USN-67-1 | Squid vulnerabilities |
References
History
No history.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-07T20:57:41.094Z
Reserved: 2005-01-18T00:00:00.000Z
Link: CVE-2005-0095
No data.
Status : Modified
Published: 2005-01-15T05:00:00.000
Modified: 2026-04-16T00:27:16.627
Link: CVE-2005-0095
OpenCVE Enrichment
No data.
Weaknesses
Ubuntu USN